From 953bb27855720a50d3abbc1758a9546829ca9913 Mon Sep 17 00:00:00 2001
From: Ahmad Gneady <support@bigprof.com>
Date: Sun, 4 Jul 2021 00:16:46 +0200
Subject: [PATCH] Fix stored xss issue.

---
 app/hooks/SummaryReport.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/hooks/SummaryReport.php b/app/hooks/SummaryReport.php
index 2e597f4..035237b 100644
--- a/app/hooks/SummaryReport.php
+++ b/app/hooks/SummaryReport.php
@@ -835,7 +835,7 @@ private function section_data_table() {
 						?>
 						<tr>
 							<td class="text-right hidden row-number"><?php echo ++$row_number; ?></th>		
-							<td class="text-left item-label"><?php echo $item['label']; ?></td>
+							<td class="text-left item-label"><?php echo safe_html($item['label']); ?></td>
 
 							<td class="text-right item-value"><?php echo $value1; ?></td>
 							<?php if(isset($this->date_field)) { ?>