Update hooks.php

Fixes a low risk XSS vulnerability. Classified as low risk due to needing access to ACP->Config.
dragonexpert · Feb 6, 2019 · 051465d · 051465d
1 parent f0026c3
commit 051465d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/plugins/recentthreads/hooks.php b/inc/plugins/recentthreads/hooks.php
@@ -94,7 +94,7 @@ function recentthread_list_threads($return=false)
     // Take into account any ignored forums
     if($mybb->settings['recentthread_forumskip'])
     {
-        $ignoreforums = " AND t.fid NOT IN(" . $mybb->settings['recentthread_forumskip'] . ") ";
+        $ignoreforums = " AND t.fid NOT IN(" . htmlspecialchars($mybb->settings['recentthread_forumskip']) . ") ";
     }
     $forums = $cache->read("forums");
     $prefixes = $cache->read("threadprefixes");