CVE-2018-18488

CVE-2018-18488

In libadminactiondataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids[] parameter.

Source: CVE-2018-18488