[MEDIUM] Magento Open Source allows SQL Injection

PKSA-vjc5-g3tb-vz4s CVE-2023-38250 GHSA-h3g9-cwr6-hphx

Affected package: magento/project-community-edition

Affected version: <=2.0.2

Reported by:
GitHub