CVE-2021-36431

CVE-2021-36431 concerns a SQL injection in the Jocms 0.8 CMS. The vulnerability occurs in the function jo_json_check() within jocms/apps/mask/inc/mask.php, allowing remote attackers to execute arbitrary SQL and view sensitive data. CVSSv3.1 metrics in the public entries indicate a Network attack ...