SQl Injection XSS

What is the name of the domain?

What is the issue you’re encountering

I believe someone added a SQL Injection code to my website

What steps have you taken to resolve the issue?

I enable WAP and OWASP Core. My process manager on my server has the mysql cpu% always above 80%. The person left a comment on a post “DBMS_PIPE.RECEIVE_MESSAGE”.

What is the current SSL/TLS setting?

Off

Screenshot of the error