CVE-2022-38275

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list...

CVE-2022-38275

JFinal CMS 5.1.0 is affected by an SQL Injection vulnerability exposed via the /admin/contact/list API endpoint. The issue stems from unsafely handled input in the API that leads to SQL injection, with a CVSS v3.1 base score of 7.2 (HIGH) in the NVD record. The PT-SECURITY advisory confirms the v...