distant attackers can inject JavaScript code with no authorization. Exploiting this vulnerability, attackers can steal person credentials or execute actions such as injecting malicious scripts or redirecting end users https://www.ralantech.com/mysql-database-health-check-consulting-service/