CVE-2020-35243

CVE-2020-35243

Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb.

Source: CVE-2020-35243