Possible SQL injection when changing uploading settings

[GipoScribantino]

I tried to change "Default upload as:", but clicking save throws an error stating SQL might get injected.
Of course the setting is not saved, at least UI-wise.
The error message is also slightly invisible, as it's an overlay with not background and the text under it is still visible. I'm using the Light Bronze theme, in case it matters.

 

[Xnot]

Do you have a default upload language selected in the dropdown?

 

[GipoScribantino]

No, I do not.
Both settings have the default value.

 

[Xnot]

Try selecting a language and then saving the settings.

 

[GipoScribantino]

It worked, but setting a default language is kind of useless to me, as I upload both to italian and english.
That's why I tried to change only the group, which ended up on this error.

 

[Xnot]

The page doesn't handle not having anything selected on the drop-down too well, and honestly it should just be English by default so eh.