From 7fa554f396d04018b92011567f6e17c9c7aaeecd Mon Sep 17 00:00:00 2001
From: thisgun <thisgun@naver.com>
Date: Mon, 13 Jul 2026 07:38:27 +0000
Subject: [PATCH] =?UTF-8?q?XSS=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 adm/member_form.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/adm/member_form.php b/adm/member_form.php
index 3a4ae292f..501d6aa2c 100644
--- a/adm/member_form.php
+++ b/adm/member_form.php
@@ -625,7 +625,7 @@ add_javascript(G5_POSTCODE_JS, 0);    //다음 주소 js
                 <?php for ($i = 1; $i <= 10; $i++) { ?>
                     <tr>
                         <th scope="row"><label for="mb_<?php echo $i ?>">여분 필드 <?php echo $i ?></label></th>
-                        <td colspan="3"><input type="text" name="mb_<?php echo $i ?>" value="<?php echo $mb['mb_' . $i] ?>" id="mb_<?php echo $i ?>" class="frm_input" size="30" maxlength="255"></td>
+                        <td colspan="3"><input type="text" name="mb_<?php echo $i ?>" value="<?php echo get_sanitize_input($mb['mb_' . $i]); ?>" id="mb_<?php echo $i ?>" class="frm_input" size="30" maxlength="255"></td>
                     </tr>
                 <?php } ?>