Before < 2.2.10 : SQL injec­tion pos­si­ble (https://packetstormsecurity.com/files/152356/CMS-Made-Simple-SQL-Injection.html)