Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
CWE-843, CWE-843