[Deadsy]

ATTENTION!

Vulnerable through XSS attacks!

I wrote Pedro! but still no answer...

How to fix:

1) open ../modcp/pprm.php and search for:

PHP Code:

$maincells = array($quicklinks,'<div class="reason">' . $row['reason'] . '</div>'); 


Replace with:

PHP Code:

$maincells = array($quicklinks,'<div class="reason">' . htmlspecialchars($row['reason']) . '</div>'); 


2) open ../pprm.php and search for:

PHP Code:

        . "</div>" . $rpt['reason'] . "</td></tr>"; 


Replace with:

PHP Code:

. "</div>" . htmlspecialchars($rpt['reason']) . "</td></tr>";