CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...