The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.
Published August 26, 2019.
Reviews Module Project Reviews Module