[KVE-2022-2036] Gnuboard5 관리자페이지 내 Stored XSS 취약점 수정

2022-12-01 15:22:48 +09:00
parent 21dc36199f
commit 97a8352117
8 changed files with 12 additions and 10 deletions
--- a/adm/sms_admin/history_view.php
+++ b/adm/sms_admin/history_view.php
@ -109,7 +109,7 @@ function all_send()

    <div id="con_sms" class="sms5_box">
        <span class="box_ico"></span>
-        <textarea class="box_txt is_overview" readonly><?php echo $write['wr_message'];?></textarea>
+        <textarea class="box_txt is_overview" readonly><?php echo html_purifier($write['wr_message']); ?></textarea>
    </div>

    <?php if ($write['wr_re_total'] && !$wr_renum) { ?>