nternetinspired/OneWeb_j17 — Issue #1: Security issue htmlspecialchars
Author: Twentronix
Created: 2011-12-28 13:12:07+00:00
State: open

The inserted variables don't have htmlspecialchars, for example:
- echo $app->getCfg('sitename');
- echo $searchCols;
- and more

This is a (perhaps low) security vulnerability which should be fixed. Have a look at the Beez_20 template for a preview of using htmlspecialchars.