Merge pull request #1 from ranjit-git/ranjit-git-patch-1

event title xss fix
civicrm · Oct 24, 2023 · e96205d · e96205d
2 parents 0172313 + d231553
commit e96205d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/CRM/Event/Page/DashBoard.tpl b/templates/CRM/Event/Page/DashBoard.tpl
@@ -37,7 +37,7 @@
     <tbody>
     {foreach from=$eventSummary.events item=values key=id}
     <tr class="crm-event_{$id}">
-        <td class="crm-event-eventTitle"><a href="{crmURL p="civicrm/event/info" q="reset=1&id=`$id`"}" title="{ts}View event info page{/ts}">{$values.eventTitle}</a>
+        <td class="crm-event-eventTitle"><a href="{crmURL p="civicrm/event/info" q="reset=1&id=`$id`"}" title="{ts}View event info page{/ts}">{$values.eventTitle|smarty:nodefaults|purify}</a>
             {if $values.is_repeating_event}
                 <br/>
                 {if $values.is_repeating_event eq $id}