diff --git a/fp-plugins/mediamanager/panels/panel.mediamanager.file.php b/fp-plugins/mediamanager/panels/panel.mediamanager.file.php index 03e7ba0..331a32b 100644 --- a/fp-plugins/mediamanager/panels/panel.mediamanager.file.php +++ b/fp-plugins/mediamanager/panels/panel.mediamanager.file.php @@ -233,7 +233,7 @@ class admin_uploader_mediamanager extends AdminPanelAction { function onsubmit($data = NULL) { if (isset($_POST ['mm-newgallery'])) { - $newgallery = $_POST ['mm-newgallery-name']; + $newgallery = strip_tags($_POST ['mm-newgallery-name']); if ($newgallery == "") { $this->smarty->assign('success', -3); return 2;