[#10070] Quote extension before using it in query
(cherry picked from commit 0b517661f2c3a4ddcef0730db8855995127c4788)
[#10070] Also escape opening square bracket
(cherry picked from commit 6e556a9ae0547ef713e57392545aabf5c7d94266)
 [#10070] Also escape opening square bracket
(cherry picked from commit dd51cb789f7c3185757155d4fe84bad79915b730)
[#10070] Use :LIKE criteria instead of building a string

Note that %, _, [ no longer get escaped.
(cherry picked from commit c98247451764f560837a8b8632fdc041cb134c3a)
add changelog entry
[#10070] fix potential SQL injection vulnerability in modImport

Merge branch 'bug-10070' into release-2.2

* bug-10070:
  add changelog entry
  [#10070] Use :LIKE criteria instead of building a string
  [#10070] Also escape opening square bracket (cherry picked from commit dd51cb789f7c3185757155d4fe84bad79915b730)
  [#10070] Also escape opening square bracket (cherry picked from commit 6e556a9ae0547ef713e57392545aabf5c7d94266)
  [#10070] Quote extension before using it in query (cherry picked from commit 0b517661f2c3a4ddcef0730db8855995127c4788)