CVE-2020-26677

Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt