What type of security issue is this

Question

Location

src\qa-include\app\format.php:272

Source File

src\qa-include\app\format.php

Availability Impact

Partial

Confidentiality Impact

Partial

Integrity Impact

Partial

CWE:

• 79

API:

Potential user controlled data within PHP converted to HTML

<a href="' . qa_path_html('ip/' . $ip) . '" title="' . qa_lang_html_sub('main/ip_address_x', qa_html($ip)) . '" class="qa-ip-link">' . $anchorhtml . '</a>

Comments

Where are you seeing that report?

Answer 1

It's not a security issue, because the input apparently is being sanitzed. If it weren't that would be a code injection vulnerabilty.