Finding an unseen SQL Injection by bypassing escape functions in mysqljs/MySQL

flattsecurity.medium.com