[KVE-2022-2036] Gnuboard5 관리자페이지 내 Stored XSS 취약점 수정

2022-12-01 15:22:48 +09:00
parent 21dc36199f
commit 97a8352117
8 changed files with 12 additions and 10 deletions
--- a/adm/sms_admin/ajax.sms_write_form.php
+++ b/adm/sms_admin/ajax.sms_write_form.php
@ -66,6 +66,8 @@ while($res = sql_fetch_array($qry))
        $group_name = '미분류';
    else
        $group_name = $tmp['fg_name'];
+
+    $res['fo_content'] = html_purifier($res['fo_content']);
    $list_text .="
    <li class=\"screen_list sms5_box\">
        <span class=\"box_ico\"></span>