CVE-2023-40922: Improper Neutralization of Special Elements used in an SQL Command

kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocsidcart parameter at KerawenDeliveryModuleFrontController::initContent...