CVE-2021-41947

CVE-2021-41947 involves a SQL injection in Subrion CMS v4.2.1’s visual-mode. Multiple sources (NVD/NVD-derived entries, CNVD, Red Hat, Veracode, CVE listings) attribute the issue to the visual.php path used by the jsonAction function, enabling a malicious user to obtain sensitive database informa...