[rpertiet]

I'm running Photopost Pro 6.02 and just got flagged on PCI scanning for a Cross Site Scripting problem in showphoto.php.

Recommended solution:

When accepting user input ensure that you are HTML encoding potentially malicious characters if you ever display the data back to the client.

Ensure that parameters and user input are sanitized by doing the following:
Remove < input and replace with &lt;
Remove > input and replace with &gt;
Remove ' input and replace with &apos;
Remove " input and replace with &#x22;
Remove ) input and replace with &#x29;
Remove ( input and replace with &#x28;


Is there a fix for this?

Thanks