CVE-2020-35326: Inxedu

Critical severity, CVSS 9.8. EPSS: 13.6% chance of exploitation in the next 30 days.

SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value.

Affected products

• Inxedu Inxedu: version 2.0.6 only

Published 2023-01-18. Last modified 2026-06-17.