[KVE-2019-1424]영카트 Stored XSS 취약점 수정

2019-11-15 18:31:25 +09:00
parent 0d03212fdb
commit b810a24d0a
3 changed files with 7 additions and 1 deletions
--- a/shop/personalpayform.php
+++ b/shop/personalpayform.php
@ -13,6 +13,8 @@ if(!$pp['pp_id'])
 if($pp['pp_tno'])
    alert('이미 결제하신 개인결제 내역입니다.');

+$pp['pp_name'] = strip_tags($pp['pp_name']);
+
 $g5['title'] = $pp['pp_name'].'님 개인결제';

 if(G5_IS_MOBILE)