BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
- https://github.com/relightsec/BaiCloud/blob/main/README.md
No PoCs found on GitHub currently.