From cf94cd1a6f29f535e70fb80c4426ab5fe8f1bfac Mon Sep 17 00:00:00 2001
From: Ahmad Gneady <support@bigprof.com>
Date: Sat, 10 Jul 2021 19:40:31 +0200
Subject: [PATCH] Fix stored xss issue in summary reports.

---
 app/hooks/SummaryReport.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/hooks/SummaryReport.php b/app/hooks/SummaryReport.php
index 2e597f4..035237b 100644
--- a/app/hooks/SummaryReport.php
+++ b/app/hooks/SummaryReport.php
@@ -835,7 +835,7 @@ private function section_data_table() {
 						?>
 						<tr>
 							<td class="text-right hidden row-number"><?php echo ++$row_number; ?></th>		
-							<td class="text-left item-label"><?php echo $item['label']; ?></td>
+							<td class="text-left item-label"><?php echo safe_html($item['label']); ?></td>
 
 							<td class="text-right item-value"><?php echo $value1; ?></td>
 							<?php if(isset($this->date_field)) { ?>