diff --git a/admin/include/configuration_sizes_process.inc.php b/admin/include/configuration_sizes_process.inc.php index cc2d35652..9d936858a 100644 --- a/admin/include/configuration_sizes_process.inc.php +++ b/admin/include/configuration_sizes_process.inc.php @@ -250,7 +250,7 @@ else $template->append( 'sizes', array( - $field => $_POST[$field] + $field => strip_tags($_POST[$field]) // strip_tags prevents from XSS attempt ), true );