CVE-2026-75979 xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine

A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522Beta. Affected is the function execSqlText/previewSqlText of the file DesignerController.java of the component SQL Preview Endpoint. The manipulation of the argument sqlText results in improper neutralization of special elements...