https://www.immuniweb.com/advisory/HTB23279
Multiple SQL Injection Vulnerabilities in mcart.xls Bitrix Module - HTB23279 Security Advisory