CPE
iFlytek SkillHub versions through 0.2.22 contain a missing authorization vulnerability in the skill deletion API, allowing authenticated users to delete any user's skill data.