akaunting/module-offline-payments

Incorrectly Sanitised User Input Hides Offline Payments

knightian opened this issue · 0 comments

Steps to reproduce the issue

Settings > Offline-Payments

Create a new offline payment, in the 'Code' field, enter a value with the ' character, so in my case I entered Int'l and it broke the whole thing.

Once saved, it no longer showed any offline payments and I had to manually go to the DB and remove the value directly from the DB to get it to show again

System information (Akaunting, PHP versions)

Ubuntu 20.04.2 + PHP 7.4 + Akaunting 2.1.10 + Sqlite 3.31.1

Additional comments

Nothing further