CVE-2024-34994

https://notcve.org/view.php?id=CVE-2024-34994

19 Jun 2024 — In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFeedModuleFrontController::postProcess()`. En el módulo "Channable" (channable) hasta la versión 3.2.1 de Channable para PrestaShop, un invitado puede realizar una inyección SQL a través de `ChannableFeedModuleFrontController::postProcess()`. • https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •