Cakephp/Cakephp (< 4.5.12, >= 4.6.0 < 4.6.5, >= 5.0.0 < 5.1.9, >= 5.2.0 < 5.2.14, >= 5.3.0 < 5.3.7)

Multiple methods in the CakePHP FunctionsBuilder component are vulnerable to SQL injection when user-supplied input is passed to specific functional parameters.