'Copy to..' not escaping?

Hello,

I noticed this bug in early versions of NextGen Gallery (prior to Photocrapi).

On the Manage Galleries page, if you search images, you can then select images and copy them to a different gallery. We use this to create themed or ‘best of’ galleries.

When we run the ‘Copy to..’ process we get WordPress database errors that seem to indicate an escaping issue

WordPress database error You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 's Samantha Logic and head coach Lisa Bluder help up Theairra Taylor during the H' at line 1 for query INSERT INTO hc_ngg_pictures (galleryid, filename, description, alttext, exclude) VALUES ('494', 'iowawbb-041.jpg', 'Iowa's Samantha Logic and head coach Lisa Bluder help up Theairra Taylor during the Hawkeyes' game against Indiana at Carver-Hawkeye Arena on Saturday, Jan. 25, 2014. David Scrivner / Iowa City Press-Citizen', 'Iowa's Samantha Logic and head coach Lisa Bluder help up Theairra Taylor during the Hawkeyes' game against Indiana at Carver-Hawkeye Arena on Saturday, Jan. 25, 2014. David Scrivner / Iowa City Press-Citizen', '0'); made by do_action('galleries_page_nggallery-manage-gallery'), call_user_func_array, nggAdminPanel->show_menu, nggManageGallery->nggManageGallery, nggManageGallery->post_processor_images, nggAdmin::copy_images, nggdb::insert_image, W3_Db->query, W3_DbCache->query, W3_DbCallUnderlying->query, W3_Db->query, W3_DbProcessor->query, W3_Db->default_query

https://wordpress.org/plugins/nextcellent-gallery-nextgen-legacy/