TI-2020-19289 CVE-2020-37154 · GHSA-cgfw-66j9-q2xpeLection 2.0 - 'id' SQL InjectionPriority MEDIUM 64eLection 2.0 contains an authenticated SQL injection vulnerability in the candidate management endpoint that allows attackers to manipulate database queries through the 'id' parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2026-02-06 · No fix listed CWE-89