CVE-2020-35244: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup...