CVE-2019-10866: Improper Neutralization of Special Elements used in an SQL Command

In the Form Maker plugin before 1.13.3 for WordPress, it's possible to achieve SQL injection in the function getlabelsparameters in the file form-maker/admin/models/Submissionsfm.php with a crafted value of the /models/Submissioc parameter...