Skip to content

Commit ee87821

Browse files
committed
Fix an XSS vulnerability
Updated the viewthread.php file to fix a stored XSS vulnerability in the title of forum posts.
1 parent 194c5ae commit ee87821

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

main/forum/viewthread.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -634,7 +634,7 @@
634634
'Aw:',
635635
];
636636
$replace = '<span>'.Display::returnFontAwesomeIcon('mail-reply').'</span>';
637-
$post['post_title'] = str_replace($search, $replace, $post['post_title']);
637+
$post['post_title'] = str_replace($search, $replace, Security::remove_XSS($post['post_title']));
638638

639639
// The post title
640640
$titlePost = Display::tag('h3', $post['post_title'], ['class' => 'forum_post_title']);

0 commit comments

Comments
 (0)