Hi,
Thanks for the report.
Please edit the file "administrator/components/com_hikamarket/classes/vendor.php" and replace
$vendor->vendor_published = ($config->get('allow_registration', 0) == 2 && $user_activated);
$vendor->vendor_description = JRequest::getVar('vendor_description', '', '', 'string', JREQUEST_ALLOWRAW);
By
$vendor->vendor_published = ($config->get('allow_registration', 0) == 2 && $user_activated);
$safeHtmlFilter = JFilterInput::getInstance(null, null, 1, 1);
if($config->get('register_ask_description', 1)) {
$vendor->vendor_description = JRequest::getVar('vendor_description', '', '', 'string', JREQUEST_ALLOWRAW);
$vendor->vendor_description = $safeHtmlFilter->clean($vendor->vendor_description, 'string');
}
if($config->get('register_ask_terms', 0)) {
$vendor->vendor_terms = JRequest::getVar('vendor_terms', '', '', 'string', JREQUEST_ALLOWRAW);
$vendor->vendor_terms = $safeHtmlFilter->clean($vendor->vendor_terms, 'string');
}
It will fix the issue.
This patch will be include in the next release package.
Regards,