From 545efd6c2f398292d8da27ed1586b1ee4cee3e82 Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 30 Sep 2019 17:51:37 +0900
Subject: [PATCH] =?UTF-8?q?[KVE-2019-1366]=EC=98=81=EC=B9=B4=ED=8A=B8=20XS?=
 =?UTF-8?q?S=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/shop_admin/personalpayform.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/adm/shop_admin/personalpayform.php b/adm/shop_admin/personalpayform.php
index 9fc3b171d..f86816fd9 100644
--- a/adm/shop_admin/personalpayform.php
+++ b/adm/shop_admin/personalpayform.php
@@ -112,7 +112,7 @@ if(!sql_query(" select pp_cash from {$g5['g5_shop_personalpay_table']} limit 1 "
             </tr>
             <tr>
                 <th scope="row"><label for="pp_content">내용</label></th>
-                <td><textarea name="pp_content" id="pp_content" rows="8"><?php echo $pp['pp_content']; ?></textarea></td>
+                <td><textarea name="pp_content" id="pp_content" rows="8"><?php echo html_purifier($pp['pp_content']); ?></textarea></td>
             </tr>
             </tbody>
             </table>