From 8be366b70d6c4f6859eff63fcf1d095b4f65b551 Mon Sep 17 00:00:00 2001 From: Brian Miyaji Date: Sat, 6 Nov 2021 19:08:25 +0900 Subject: [PATCH] Escape output in template functions --- includes/sp-template-functions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/sp-template-functions.php b/includes/sp-template-functions.php index 66c84c0b..15b50ae7 100644 --- a/includes/sp-template-functions.php +++ b/includes/sp-template-functions.php @@ -86,7 +86,7 @@ if ( ! function_exists( 'sportspress_taxonomy_archive_description' ) ) { if ( is_tax( array( 'sp_season', 'sp_league', 'sp_venue', 'sp_position' ) ) && get_query_var( 'paged' ) == 0 ) { $description = apply_filters( 'the_content', term_description() ); if ( $description ) { - echo '
' . $description . '
'; + echo '
' . esc_html( $description ) . '
'; } } }