[KVE-2019-1424]영카트 Stored XSS 취약점 수정

2019-11-15 18:31:25 +09:00
parent 0d03212fdb
commit b810a24d0a
3 changed files with 7 additions and 1 deletions
--- a/adm/shop_admin/personalpayformupdate.php
+++ b/adm/shop_admin/personalpayformupdate.php
@ -4,6 +4,10 @@ include_once('./_common.php');

 check_admin_token();

+if( isset($_POST['pp_name']) ){
+	$_POST['pp_name'] = strip_tags($_POST['pp_name']);
+}
+
 if($w == 'd') {
    auth_check($auth[$sub_menu], 'd');