CVE-2020-21121

The provided connected sources confirm a concrete vulnerability: Pligg CMS/Kliqqi-CMS 2.0.2 has a time-based SQL injection in admin_update_module_widgets.php via the $recordIDValue parameter. Root cause is a vulnerable SQL query construction in that file, enabling potentially unauthorized data ex...