Description Tasking Manager before 3.4.0 allows SQL Injection via custom SQL. References https://github.com/hotosm/tasking-manager/releases/tag/v3.4.0 https://github.com/hotosm/tasking-manager/issues/1731