SQL injection vulnerabililty in the front end listing module

PKSA-8vx6-vh5t-52vs CVE-2017-16558

Affected version: >=4.0.0,<4.4.8

Reported by:
FriendsOfPHP/security-advisories