tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-12123-cve-2023-44089-xss-en-consola-visual' into 'develop' 

Ent 12123 cve 2023 44089 xss en consola visual

See merge request artica/pandorafms!6497
This commit is contained in:
Rafael Ameijeiras 2023-12-01 09:22:31 +00:00
parent 39c6420d2c 0ef4685569
commit 269a4ddfa9
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pandora_console/godmode/reporting/visual_console_builder.php
View File

@ -163,7 +163,10 @@ switch ($activeTab) {
$background_color = (string) get_parameter('background_color'); $background_color = (string) get_parameter('background_color');
$width = (int) get_parameter('width'); $width = (int) get_parameter('width');
$height = (int) get_parameter('height'); $height = (int) get_parameter('height');
$visualConsoleName = (string) io_safe_input(get_parameter('name')); $visualConsoleName = (string) get_parameter('name');
$visualConsoleName = str_replace('<', '', $visualConsoleName);
$visualConsoleName = str_replace('>', '', $visualConsoleName);
$visualConsoleName = (string) io_safe_input($visualConsoleName);
$is_favourite = (int) get_parameter('is_favourite_sent'); $is_favourite = (int) get_parameter('is_favourite_sent');
$auto_adjust = (int) get_parameter('auto_adjust_sent'); $auto_adjust = (int) get_parameter('auto_adjust_sent');