# SQL Injection on tags. How to repair?

**URL:** <https://forum.mautic.org/t/sql-injection-on-tags-how-to-repair/10657>\
**Category:** General Discussion\
**Created:** [July 24, 2018, 11:13pm UTC](https://forum.mautic.org/t/sql-injection-on-tags-how-to-repair/10657 "2018-07-24T23:13:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ricardomartins](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ricardomartins/32/198_2.png) [@ricardomartins](https://forum.mautic.org/u/ricardomartins)\
**Post date:** [July 24, 2018, 11:13pm UTC](https://forum.mautic.org/t/sql-injection-on-tags-how-to-repair/10657/1 "2018-07-24T23:13:36Z")

</div>

Hi folks.  
A few weeks after upgrading to Mautic 2.13.0 my installation was attacked with SQL Injection.

O got about 255 tags lead\_tags with SQL parts.  
I can see them in the table ([https://www.dropbox.com/s/2aluj6imvv6hb4v/mautic-sqlinjection-1.jpg?dl=0](https://www.dropbox.com/s/2aluj6imvv6hb4v/mautic-sqlinjection-1.jpg?dl=0)) and also in the autocomplete field ([https://www.dropbox.com/s/b3txugcqq8xqbkq/mautic-sql-injection-2.jpg?dl=0](https://www.dropbox.com/s/b3txugcqq8xqbkq/mautic-sql-injection-2.jpg?dl=0)).

Is there a way to safely delete these tags?  
I already updated to 2.13.1 but they are still there.

Thank you.

---

<div class="post-metadata">

**Author:** ![silavapi](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/silavapi/32/7424_2.png) [@silavapi](https://forum.mautic.org/u/silavapi)\
**Post date:** [October 17, 2019, 4:33pm UTC](https://forum.mautic.org/t/sql-injection-on-tags-how-to-repair/10657/2 "2019-10-17T16:33:27Z")

</div>