WS-2023-0131

A SQL Injection exists in expenses/ajax.php & loan-management/ajax.php in unilogies/bumsys prior to 2.2.0...