Changeset 2885936

Timestamp:

03/23/2023 08:56:50 PM (3 years ago)

Author:

simonpedge

Message:

Version 2.4.9

Location:

slide-anything/trunk

Files:

• php/slide-anything-admin.php (modified) (1 diff)
• readme.txt (modified) (2 diffs)
• slide-anything.php (modified) (1 diff)

slide-anything/trunk/php/slide-anything-admin.php

@@ -2430 +2430 @@
             }
             if ( isset( $_POST[ $slide_link_url ] ) ) {
-                $slide_link_url_val = sanitize_url( wp_unslash( $_POST[ $slide_link_url ] ) );
+                $slide_link_url_val = esc_url( wp_unslash( $_POST[ $slide_link_url ] ) );
             }
             if ( isset( $_POST[ $slide_link_target ] ) ) {

slide-anything/trunk/readme.txt

@@ -91 +91 @@
 == Changelog ==
 
+= 2.4.9 =
+* Fixed a Cross-Site Scripting (XSS) vulnerability within the slide link URL field (part 2).
+
 = 2.4.8 =
 * Fixed a Cross-Site Scripting (XSS) vulnerability within the slide link URL field.
@@ -823 +826 @@
 = 2.4.8 =
 * Fixed a Cross-Site Scripting (XSS) vulnerability within the slide link URL field.
+
+= 2.4.9 =
+* Fixed a Cross-Site Scripting (XSS) vulnerability within the slide link URL field (part 2).

slide-anything/trunk/slide-anything.php

@@ -4 +4 @@
  * Plugin URI: https://wordpress.org/plugins/slide-anything/
  * Description: Slide Anything allows you to create a carousel/slider where the content for each slide can be anything you want - images, text, HTML, and even shortcodes. This plugin uses the Owl Carousel jQuery plugin, and lets you create beautiful, touch enabled, responsive carousels and sliders.
- * Version: 2.4.8
+ * Version: 2.4.9
  *
  * @package     WordPress_Slide_Anything