SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
