In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFeedModuleFrontController::postProcess()`.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')