raty vulnerabilities

2 known vulnerabilities in raty from Alior Bank. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  raty: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-7848Sep 14, 2026Alior Bank

  Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the "hookActionObjectProductUpdateBefore", "hookActionObjectCategoryUpdateBefore", and "hookActionObjectCategoryAddAfter" hook methods. The module inserts values of t

• 8.6 High severity

  raty: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-15600Sep 14, 2026Alior Bank

  Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An a