is acf has XSS Bug ?!!!!

• enter64

• July 5, 2019 at 12:32 pm

hello
i check acf 5.8.1 zip file in this site
https://find-xss.net/scanner/?l=en

and result is in below image
http://s8.picofile.com/file/8365669484/2019_07_05_7_01_43.png

can anyone describe this ?
thanks

• enter64

• July 5, 2019 at 12:38 pm

i run this test because of i get a fatal error on my site
the fatal error describe in below file

http://s8.picofile.com/file/8365669518/modsecurity.txt.html

• enter64

• July 5, 2019 at 1:39 pm

i read this article
https://snippets.khromov.se/sanitizing-and-securing-advanced-custom-fields-output/
and i did test, so any field link text field is not escape content
any suggestion ?

• John Huebner

• July 12, 2019 at 10:47 pm

Why are you worried about this?

Are you using front end forms?

Do you have people in your admin that you do not trust?

On top of this the article is at over 4 years old. ACF currently does more escaping. I can’t see anything in the first links that you posted, so I don’t know what you’re really talking about.