CVE-2020-26677

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API...

PT-2021-11257

Name of the Vulnerable Software and Affected Versions: vFairs version 3.3 Description: The issue allows any logged-in user to perform SQL injection by sending a malicious query to the API. Recommendations: For version 3.3, update to a version that includes a fix for this issue, as using a malicio...