From 8eabe04a48c1c7409fcf6afa9cb67369b0a2b2f8 Mon Sep 17 00:00:00 2001
From: samitshah7493 <samitshah7493@gmail.com>
Date: Wed, 20 Nov 2019 12:22:53 +0530
Subject: [PATCH] Solved XSS Vulnerability #795

---
 php/admin/quiz-options-page.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/php/admin/quiz-options-page.php b/php/admin/quiz-options-page.php
index b3df72f2b..8e0e9e7dd 100644
--- a/php/admin/quiz-options-page.php
+++ b/php/admin/quiz-options-page.php
@@ -159,7 +159,7 @@ function qsm_generate_quiz_options() {
                                     <form action='' method='post' id="edit-name-form">
                                             <label><?php _e( 'Name', 'quiz-master-next' ); ?></label>
                                             <input type="text" id="edit_quiz_name" name="edit_quiz_name" value="<?php echo $quiz_name; ?>" />
-                                             <input type="hidden" id="edit_quiz_id" name="edit_quiz_id" value="<?php echo isset($_GET['quiz_id']) ? $_GET['quiz_id'] : ''; ?>" />
+                                            <input type="hidden" id="edit_quiz_id" name="edit_quiz_id" value="<?php echo isset($_GET['quiz_id']) && is_int($_GET['quiz_id']) ? (int) $_GET['quiz_id'] : '0'; ?>" />
                                             <?php wp_nonce_field( 'qsm_edit_name_quiz', 'qsm_edit_name_quiz_nonce' ); ?>
                                     </form>
                             </main>