CVE-2022-45535

AeroCMS v0.0.1 contains a SQL Injection vulnerability in the admin/categories.php endpoint, exploitable via the edit parameter, potentially allowing attackers to access database information. Documents do not provide a confirmed exploit path, impact beyond data exposure, or official fixes. A worka...