Related VulnerabilitiesPoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)Ivanti Sentry /mics/api/v2/sentry/mics-config/handleMessage 命令执行漏洞(CVE-2026-10520)智联云采 SRM2.0 /a/sys/sysMessage/statusList SQL 注入漏洞PoCretool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component CollectionsPoC孚盟云CRM /m/Dingding/Ajax/AjaxFormDefault.ashx sendProductMessage SQL 注入漏洞PoC蓝凌-EIS智慧协同平台 /third/DingTalk/Pages/DingTalkMessage.aspx SQL 注入漏洞可豪软件信息技术南京有限公司可豪刀模ERP管理系统Message_Ajax.ashx pkVal参数存在SQL注入漏洞PoCCVE-2024-13222: WordPress User Messages <= 1.2.4 - Reflected XSSPoC孚盟云CRM /m/Dingding/Ajax/AjaxProviderList.ashx SendMessage SQL 注入漏洞云视频管理系统selectMessage存在SQL注入漏洞Frappe /api/method/frappe.automation.doctype.auto_repeat.auto_repeat.generate_message_preview SQL 注入漏洞(CVE-2025-68929)