KVE-2018-0684 영카트 XSS 취약점 수정

2018-09-06 10:44:31 +09:00
parent ddbb2dd4e5
commit d21010276a
11 changed files with 11 additions and 10 deletions
--- a/adm/shop_admin/bannerformupdate.php
+++ b/adm/shop_admin/bannerformupdate.php
@ -35,6 +35,7 @@ if( $bn_bimg || $bn_bimg_name ){
 }

 $bn_url = clean_xss_tags($bn_url);
+$bn_alt = function_exists('clean_xss_attributes') ? clean_xss_attributes(strip_tags($bn_alt)) : strip_tags($bn_alt);

 if ($w=="")
 {