[HIGH] OpenSTAManager has a Time-Based Blind SQL Injection via `options[stato]` Parameter

PKSA-84pv-3jy7-8y8y CVE-2026-28805 GHSA-3gw8-3mg3-jmpc

Affected package: devcode-it/openstamanager

Affected version: <=2.10.1

Reported by:
GitHub