CVE-2020-28102

cscms v4.1 allows for SQL injection via the «js_del» function.