Sql injection

whatsns 4.0 allows index.php?question/ajaxadd.html title SQL injection...

CVE-2019-11450

CVE-2019-11450 affects Whatsns 4.0, where SQL injection is possible via the title parameter in index.php?question/ajaxadd.html. The issue is documented with CVSS v3.0 base score 9.8 (CRITICAL) and CVSS v2.0 base score 7.5 (HIGH). Affected component: the title field in the ajaxadd endpoint; root c...