Description
An SQL Injection vulnerability exists in the league_id parameter of a function call made by the leaguemanager_export page.
Recommendation
To mitigate the risk, update the affected plugin to a secure version. If an update is not available or feasible, consider removing the plugin from your WordPress installation.