Taocms · Taocms · CVE-2022-23380
**Name of the Vulnerable Software and Affected Versions**
taocms version 3.0.2
**Description**
There is a SQL injection issue in the background of taocms, specifically in the parameter `id` within the endpoint "/action=admin&id=2&ctrl=edit".
**Recommendations**
For taocms version 3.0.2, avoid using the parameter `id` in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.