CVE-2022-38278

Affected software & impact: JFinal CMS 5.1.0 is vulnerable to SQL Injection via the /admin/friendlylink/list endpoint. The vulnerability is documented across multiple sources, confirming the issue originates from that API path and involves improper handling of input that leads to SQL injection. R...