CVE-2024-34994 Information

Description

In the module \Channable\ (channable) up to version 3.2.1 from Channable for PrestaShop a guest can perform SQL injection via ChannableFeedModuleFrontController::postProcess().

Reference

https://github.com/friends-of-presta/security-advisories/blob/main/_posts/2024-06-18-channable.md