CVE-2024-29320: Improper Neutralization of Special Elements used in an SQL Command

Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php...