PHPCMS V9 Q: module injection vulnerability and repair

Brief description: The problem lies in the plug-in. It is not installed by default, so the harm is not very wide.
Detailed Description: // starts from line 1
Public function edit (){
/* Save several rows */
If (isset ($ _ GET ['job']) $ job = $ _ GET ['job'];
If (isset ($ _ GET ['id']) $ id = $ _ GET ['id']; // are all filtered here?
If (isset ($ _ GET ['pid ']) $ pid = $ _ GET ['pid'];
// Several lines are omitted here
// Comes to row 186 ....
$ R = $ this-> db-> get_one ("askid = $ id", "*", $ this-> table_name );
Finished...
Proof of vulnerability:

Solution: You know