Site hacked, URL Injection

My site apparently has been hacked. This was reported to me by the Google console.

Examples of urls are: ?deceiving=deceiving-can-writer-appearances-essay-be.phtml and ?main=main-essays.asp

Any advice is much appreciated.