This appears to be an exact copy of an issue described 12 days ago: https://flattsecurity.medium.com/finding-an-unseen-sql-injection-by-bypassing-escape-functi

This appears to be an exact copy of an issue described 12 days ago: https://flattsecurity.medium.com/finding-an-unseen-sql-injection-by-bypassing-escape-functions-in-mysqljs-mysql-90b27f6542b4 https://flattsecurity.medium.com/finding-an-unseen-sql-injec... The opening segment is the exact same piece of vulnerable code.