Incubator » CB GroupJive

admin.cbgroupjive.php function showConfig : missing htmlspecialchars for input values everywhere (around 30 places):

e.g.

        $input['general_title']                =    '<input type="text" id="general_title" name="general_title" value="' . $plugin->params->get( 'general_title', $plugin->name ) . '" class="inputbox" size="25" />';

should be:

        $input['general_title']                =    '<input type="text" id="general_title" name="general_title" value="' . htmlspecialchars( $plugin->params->get( 'general_title', $plugin->name ) ) . '" class="inputbox" size="25" />';