[CRITICAL] Backport for CVE-2021-21024 Blind SQLi from Magento 2

PKSA-xyp3-9qyk-2bz5 CVE-2021-21427 GHSA-fvrf-9428-527m

Affected package: openmage/magento-lts

Affected version: >=20.0.0,<=20.0.8|<=19.4.12

Reported by:
GitHub