The following warnings occurred:
Warning [2] Undefined variable $unreadreports - Line: 26 - File: global.php(961) : eval()'d code PHP 8.1.2-1ubuntu2.14 (Linux)
File Line Function
/global.php(961) : eval()'d code 26 errorHandler->error
/global.php 961 eval
/showthread.php 28 require_once





× This forum is read only. As of July 23, 2019, the UserSpice forums have been closed. To receive support, please join our Discord by clicking here. Thank you!
UserSpice   ›   Support Center   ›   UserSpice 4.3 and Below   ›   XSS security issue

  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
XSS security issue
Caspar Leo
User
Joined: Feb 2017
Posts: 4

Reputation: 0
#1
04-03-2017, 12:50 PM
Hey,

noticed a XSS vulnerability in users/edit_profile.php on line 45:

$newBio = $_POST['bio'];
Should be: $newBio = Input::get('bio');

Otherwise we got some naked & public scripts in users bios
  Reply


Messages In This Thread
XSS security issue - by Caspar Leo - 04-03-2017, 12:50 PM
XSS security issue - by mudmin - 04-03-2017, 03:10 PM
XSS security issue - by mudmin - 04-16-2017, 01:16 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)