Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook…
CVSS 4.0HIGH 8.6·Network·High privileges·No interaction·EPSS 0.00383·Published 2026-09-14·Fixed in 8.1.11, 9.0.7CWE-89