From 73bb9b11cf11fdf8ef831eff4736bc20f85c60ed Mon Sep 17 00:00:00 2001
From: kurudrive <kurudrive@gmail.com>
Date: Mon, 29 Jul 2024 15:51:10 +0900
Subject: [PATCH] add escape

---
 inc/other-widget/widget-profile.php | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/inc/other-widget/widget-profile.php b/inc/other-widget/widget-profile.php
index b5b10c61..bab0b88a 100644
--- a/inc/other-widget/widget-profile.php
+++ b/inc/other-widget/widget-profile.php
@@ -356,9 +356,7 @@ function widget( $args, $instance ) {
 		echo PHP_EOL . '<div class="veu_profile">' . PHP_EOL;
 
 		if ( isset( $instance['label'] ) && $instance['label'] ) {
-			echo $args['before_title'];
-			echo $instance['label'];
-			echo $args['after_title'];
+			echo wp_kses_post( $args['before_title'] . $instance['label'] . $args['after_title'] );
 		}
 		?>
 <div class="profile" >