Cacti, the performance and fault management framework, has been discovered with a blind SQL injection vulnerability, which could reveal Cacti database contents or trigger remote code execution.  The CVE for this vulnerability has been assigned with CVE-2023-51448, and the severity has been given as 8.8 (High). This vulnerability existed due to insufficient sanitization of a parameter.

Source: GBHackers