Weird Garbage code in address inputs

[cpp-dev]

This morning while checking the log notifications I saw an order was not processing properly. When I viewed it in the Admin page I found injected JavaScript code in the address. See Image.

Has anyone else see this sort of thing?

The script caused no real harm, but would like to know to maybe keep it from happening again.

[habreu]

This doesn't answer you question on how to prevent but found this online and indicates it might be an xss cross site scripting attempt

https://whmcs.community/topic/304625...r-signup-name/

[cpp-dev]

Yeah, that's the impression I got. Was just wondering if anyone else has seen similar in their use.