Changeset 3136502

Timestamp:

08/16/2024 09:48:27 AM (16 months ago)

Author:

10web

Message:

• Fixed: Security issue.

Location:

form-maker/trunk

Files:

• admin/views/Submissions_fm.php (modified) (2 diffs)
• form-maker.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)

form-maker/trunk/admin/views/Submissions_fm.php

@@ -461 +461 @@
                   <th class="<?php echo $sorted_labels_id[$i]; ?>_fc" <?php echo $styleStr; ?>>
                     <div>
-                    <input name="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" id="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" type="text" value="<?php echo $lists[$form_id . '_' . $sorted_labels_id[$i] . '_search']; ?>">
+                    <input name="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" id="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" type="text" value="<?php echo esc_html($lists[$form_id . '_' . $sorted_labels_id[$i] . '_search']); ?>">
                     <?php if ( $is_verified_exist ) { ?>
                       <label for="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search_verified'; ?>">Verified</label>
@@ -474 +474 @@
                 default: ?>
                                 <th class="<?php echo $sorted_labels_id[$i]; ?>_fc" <?php echo $styleStr; ?>>
-                                  <input name="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" id="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" type="text" value="<?php echo stripslashes( htmlspecialchars( urldecode($lists[$form_id . '_' . $sorted_labels_id[$i] . '_search'] ) ) ); ?>">
+                                  <input name="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" id="<?php echo $form_id . '_' . $sorted_labels_id[$i] . '_search'; ?>" type="text" value="<?php echo esc_html($lists[$form_id . '_' . $sorted_labels_id[$i] . '_search']); ?>">
                                 </th>
                                 <?php

form-maker/trunk/form-maker.php

@@ -4 +4 @@
  * Plugin URI: https://10web.io/plugins/wordpress-form-maker/?utm_source=form_maker&utm_medium=free_plugin
  * Description: This plugin is a modern and advanced tool for easy and fast creating of a WordPress Form. The backend interface is intuitive and user friendly which allows users far from scripting and programming to create WordPress Forms.
- * Version: 1.15.26
+ * Version: 1.15.27
  * Author: 10Web Form Builder Team
  * Author URI: https://10web.io/plugins/?utm_source=form_maker&utm_medium=free_plugin 
@@ -27 +27 @@
   public $front_urls = array();
   public $main_file = '';
-  public $plugin_version = '1.15.26';
-  public $db_version = '2.15.26';
+  public $plugin_version = '1.15.27';
+  public $db_version = '2.15.27';
   public $menu_postfix = '_fm';
   public $plugin_postfix = '';

form-maker/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 4.6
 Tested up to: 6.5
-Stable tag: 1.15.26
+Stable tag: 1.15.27
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -558 +558 @@
 
 == Changelog ==
+= 1.15.27 =
+* Fixed: Security issue.
+
 = 1.15.26 =
 * Fixed: Security issue.