Skip to content
Permalink
Browse files Browse the repository at this point in the history
Fix stored XSS as reported by Chirag Savla
It's a pretty old problem – a beginner's mistake in programming. Damn. As far I can see no huge problem because of CSRF and you need to be logged in to the backend. But it wasn't well done from my side.

If you have older installations check the html() function which were added. Older releases do not know html() – use html_specialchars() instead.
  • Loading branch information
slackero committed Oct 23, 2017
1 parent 79345c1 commit 62c7c4a
Show file tree
Hide file tree
Showing 4 changed files with 424 additions and 445 deletions.
2 changes: 1 addition & 1 deletion include/inc_lib/revision/revision.php
Expand Up @@ -10,5 +10,5 @@
**/

define('PHPWCMS_VERSION', '1.8.9');
define('PHPWCMS_RELEASE_DATE', '2017/09/14');
define('PHPWCMS_RELEASE_DATE', '2017/10/23');
define('PHPWCMS_REVISION', '547');

0 comments on commit 62c7c4a

Please sign in to comment.