CVE-2022-32376: Improper Neutralization of Special Elements used in an SQL Command

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getevents.php?eventid=...