Quotes not properly handled within input #1447

Admidio · Jun 21, 2023 · 5910a8d · 5910a8d
1 parent f806a86
commit 5910a8d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/adm_program/system/classes/CategoryReport.php b/adm_program/system/classes/CategoryReport.php
@@ -375,7 +375,7 @@ public function getConfigArray()
             while ($row = $statement->fetch()) {
                 $values = array();
                 $values['id']             = $row['crt_id'];
-                $values['name']           = $row['crt_name'];
+                $values['name']           = SecurityUtils::encodeHTML($row['crt_name']);
                 $values['col_fields']     = $row['crt_col_fields'];
                 $values['selection_role'] = $row['crt_selection_role'];
                 $values['selection_cat']  = $row['crt_selection_cat'];