add escape

vektor-inc · Jul 29, 2024 · c2f31cd · c2f31cd
1 parent dffea58
commit c2f31cd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/other-widget/widget-pr-blocks.php b/inc/other-widget/widget-pr-blocks.php
@@ -285,7 +285,7 @@ public function widget( $args, $instance ) {
 				// title text
 				echo '<h1 class="prBlock_title">';
 				if ( isset( $instance[ 'label_' . $i ] ) && $instance[ 'label_' . $i ] ) {
-					echo $instance[ 'label_' . $i ];
+					echo wp_kses_post( $instance[ 'label_' . $i ] );
 				} else {
 					_e( 'PR Block', 'vk-all-in-one-expansion-unit' );
 				}