CVE-2023-44165

The ‘Password’ parameter of the process_login.php resource

does not validate the characters received and they

are sent unfiltered to the database.

Source: CVE-2023-44165