A limited SQL injection risk was identified in the "browse list of users" site administration page.
CWE-89, CWE-89