CVE-2021-36433

CVE-2021-36433 affects jocms 0.8. It is a SQL injection vulnerability in the jo_delete_mask function (jocms/apps/mask/mask.php) that allows remote attackers to run arbitrary SQL and view sensitive data. CVSS v3.1 base score 9.1 (CRITICAL); impact on confidentiality and integrity; attack vector NE...