CVE-2021-44302

CVE-2021-44302 affects BaiCloud-cms v2.5.7 and is due to multiple SQL injection vulnerabilities exposed through the tongji and baidu_map parameters in /user/ztconfig.php. The NVD records CVSS 3.1 base score 8.8 (HIGH) with network access, low attack complexity, and privileges required at LOW, ind...