TI-2022-22497 CVE-2022-45564 · GHSA-fpfm-wf57-3589SQL Injection vulnerability in znfit Home improvement ERP management system…Priority MEDIUM 50SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00761 · Published 2023-02-21 · No fix listed CWE-89