pkp/pkp-lib#7378 Fix reflected XSS issues

pkp · Oct 13, 2021 · 0f01001 · 0f01001
1 parent 3fec277
commit 0f01001
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/controllers/grid/settings/sections/form/sectionForm.tpl b/templates/controllers/grid/settings/sections/form/sectionForm.tpl
@@ -65,7 +65,7 @@
 	{fbvFormSection list=true title="user.role.subEditors"}
 		{if count($subeditors)}
 			{foreach from=$subeditors item="subeditor" key="id"}
-				{fbvElement type="checkbox" id="subEditors[]" value=$id checked=in_array($id, $assignedSubeditors) label=$subeditor translate=false}
+				{fbvElement type="checkbox" id="subEditors[]" value=$id checked=in_array($id, $assignedSubeditors) label=$subeditor|escape translate=false}
 			{/foreach}
 		{else}
 			<span class="pkp_form_error"><p>{translate key="manager.section.noSectionEditors"}</p></span>