osCommerce / oscommerce2

osCommerce Online Merchant v2.x
http://www.oscommerce.com
MIT License
281 stars 222 forks source link

Potential XSS vulnerability in tep_draw_input_field (html_output.php) #642

Open h86 opened 5 years ago

h86 commented 5 years ago

In html_output, the function tep_draw_input_field uses tep_output_string($value) to write a user-chosen string to the value-attribute of an input field. tep_output_string translates " to " but < and > are not translated.

Applied to the search field, this has the effect that for example Githubissues.

  • Githubissues is a development platform for aggregating issues.