In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.Referenceshttps://security.friendsofpresta.org/modules/2023/10/17/posrotatorimg.html
