A SQL injection risk flaw was found in the XMLDB editor tool available to site administrators.
CWE-89