LatePoint < 5.7.7 - Unauthenticated Authentication Bypass / Account Takeover

Unauthenticated SQL operator injection in the latepointroutecall AJAX route wpajaxnopriv. buildconditionsquery in lib/models/model.php treats literal 'IS NULL'/'IS NOT NULL' as SQL operators and concatenates them unbound, bypassing the customer password-reset token check - account takeover of...