Possible XSS vulnerability

[enferas]

Hello,

I would like to report for XSS vulnerability.

In file example.php

\\ line 38
$query = $_GET['query'];
\\ line 64
$resout = str_replace('{query}', $query, $resout);
\\ line 111
$resout = str_replace('{result}', $winfo, $resout);
\\ line 117
exit(str_replace('{results}', $resout, $out));

exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is XSS vulnerability.

[enferas]

CVE-2021-43698 is assigned to this discovery.

An unspecified version of phpWhois is affected by a Cross Site Scripting (XSS) vulnerability. In file example.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET['query'] then there is a XSS vulnerability.

[sparc]

thanx ! fixed !