[KVE-2022-2036] Gnuboard5 관리자페이지 내 Stored XSS 취약점 수정

2022-12-01 15:22:48 +09:00
parent 21dc36199f
commit 97a8352117
8 changed files with 12 additions and 10 deletions
--- a/adm/shop_admin/configform.php
+++ b/adm/shop_admin/configform.php
@ -593,7 +593,7 @@ if(!$default['de_kakaopay_cancelpwd']){
        <tr>
            <th scope="row"><label for="de_bank_account">은행계좌번호</label></th>
            <td>
-                <textarea name="de_bank_account" id="de_bank_account"><?php echo $default['de_bank_account']; ?></textarea>
+                <textarea name="de_bank_account" id="de_bank_account"><?php echo html_purifier($default['de_bank_account']); ?></textarea>
            </td>
        </tr>
        <tr>