CVE-2020-35382

SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user.

Date published : 2020-12-14

https://github.com/craigrodway/classroombookings/issues/27