SQL

An attacker can inject malicious code into the database to steal database credentials, reveal sensitive information, or deploy a malicious plugin to the website. In

A successful exploit could cause denial-of-service condition or install malicious code on the application server. Mapper v4.0.0 to v4.2.0 was discovered

This allowed for remote attackers to execute arbitrary SQL commands or cause data leakage by running arbitrary queries. This issue was resolved by properly filtering