YoudianCMS v9.5.0 was discovered to contain a SQL injection vulnerability via the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php.Referenceshttps://www.yuque.com/docs/share/8864c0c7-ad8e-407f-98d3-104d2f2dd13e