Harish P

An SQL injection occurs in the API contact filtering mechanism. This issue arises from insufficient recursive sanitization of nested query parameters, allowing an authenticated API user to bypass input filtering and execute arbitrary SQL commands.