TI-2020-19298 CVE-2020-37163 · GHSA-2whv-fqw2-pp6pQuickDate 1.3.2 - SQL InjectionPriority HIGH 77QuickDate 1.3.2 contains a SQL injection vulnerability that allows remote attackers to manipulate database queries through the '_located' parameter in the find_matches endpoint.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00455 · Published 2026-02-06 · No fix listed CWE-89