Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().
prestashop possearchproducts 1.7