CVE-2021-40814

https://notcve.org/view.php?id=CVE-2021-40814

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection. El addon Customer Photo Gallery versiones anteriores a 2.9.4, para PrestaShop es vulnerable a una inyección SQL • https://www.getastra.com/blog/911/plugin-exploit/prestashops-customer-photo-gallery-module-vulnerable-to-sql-injection-attacks • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •