-
Notifications
You must be signed in to change notification settings - Fork 52
Closed
Description
Hey to every people who want to use this project, and to creator (great project)
I spotted some XSS on the Data Result, not a big vuln because it's pretty rare to have that type of username, but should be fixed. It happend when the database contains some code that can be executed.
Vulnerability Preview
How to fix ?
Simply use htmlspecialchars() or htmlentities() on the result variable $value like below.
This fix is the simplest, i also suggest to block any special characters in the search field.
ofarukcaki
Metadata
Metadata
Assignees
Labels
No labels