From 7f13d5123e968eb7b6b39ff277a73d48cfd21d8d Mon Sep 17 00:00:00 2001
From: Peter Ivanov <peter@microweber.com>
Date: Fri, 29 Apr 2022 18:15:53 +0300
Subject: [PATCH] update

---
 userfiles/modules/settings/group/template.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/userfiles/modules/settings/group/template.php b/userfiles/modules/settings/group/template.php
index 46416f52143..2edfa9e001f 100644
--- a/userfiles/modules/settings/group/template.php
+++ b/userfiles/modules/settings/group/template.php
@@ -60,7 +60,7 @@ function mw_set_default_template() {
         $change_template = true;
         $selected_template = $_GET['template'];
     }
-
+    $selected_template = xss_clean($selected_template);
     ?>
 <?php if($change_template){ ?>
     <div class="alert alert-dismissible alert-primary">