TI-2021-22603 CVE-2021-48008 · GHSA-x5gc-r7qf-2h87Chanjet CRM SQL Injection via get_usedspace.phpPriority MEDIUM 44Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by manipulating the site_id GET parameter in the webservice endpoint.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00571 · Published 2026-09-18 · No fix listed CWE-89