From 7fe2614114e64422172f88cd2a93091ca7360f99 Mon Sep 17 00:00:00 2001
From: Tony Murray <murraytony@gmail.com>
Date: Thu, 5 Oct 2023 23:03:26 -0500
Subject: [PATCH] Fix xss in device groups overview (#15399)

---
 includes/html/dev-groups-overview-data.inc.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/html/dev-groups-overview-data.inc.php b/includes/html/dev-groups-overview-data.inc.php
index 432ec05673..e7d61a01c8 100644
--- a/includes/html/dev-groups-overview-data.inc.php
+++ b/includes/html/dev-groups-overview-data.inc.php
@@ -18,7 +18,7 @@ if (count($device_groups)) {
                         <div class="col-sm-12">
                         <?php foreach ($device_groups as $group) { ?>
                             <span style="margin: 8px;">
-                                <a href="<?=url('devices/group=' . $group['id'])?>" target="_blank"><?=$group['name']?></a>
+                                <a href="<?=url('devices/group=' . $group['id'])?>" target="_blank"><?=htmlspecialchars($group['name'])?></a>
                             </span>
                         <?php } ?>
                         </div>