Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API.

Published May 26, 2021 · Updated Jul 9, 2026 · Assigned by mitre