cscms v4.1 allows for SQL injection via the "js_del" function.

Published Jan 11, 2022 · Updated Aug 4, 2024 · Assigned by mitre