CVE-2020-26677

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API.

Date published : 2021-05-26

Home v5

https://api.vfairs.com/v1/users/