From 2a29c6bf6494798a90388dbc688a52eae6693958 Mon Sep 17 00:00:00 2001
From: Ahmad Gneady <support@bigprof.com>
Date: Wed, 30 Jun 2021 20:46:55 +0200
Subject: [PATCH] Fix low severity stored XSS in `admin/pageViewGroups.php`

---
 app/admin/pageViewGroups.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/admin/pageViewGroups.php b/app/admin/pageViewGroups.php
index dc710c8..a989abf 100644
--- a/app/admin/pageViewGroups.php
+++ b/app/admin/pageViewGroups.php
@@ -74,7 +74,7 @@
 				$groupMembersCount = sqlValue("select count(1) from membership_users where groupID='$row[0]'");
 				?>
 				<tr>
-					<td><a href="pageEditGroup.php?groupID=<?php echo $row[0]; ?>"><?php echo $row[1]; ?></a></td>
+					<td><a href="pageEditGroup.php?groupID=<?php echo $row[0]; ?>"><?php echo htmlspecialchars($row[1]); ?></a></td>
 					<td><?php echo htmlspecialchars(thisOr($row[2])); ?></td>
 					<td class="text-right"><?php echo $groupMembersCount; ?></td>
 					<td class="text-center">