SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.Referenceshttps://security.friendsofpresta.org/modules/2023/12/07/sturls.html