WordPress.org
Get WordPress

Plugin Directory

Changeset 3149367


Ignore:
Timestamp:
09/10/2024 04:55:34 PM (15 months ago)
Author:
10web
Message:

Fixed: Security issue

Location:
photo-gallery/trunk
Files:
5 edited

Legend:

Unmodified
Added
Removed

  • photo-gallery/trunk/frontend/views/BWGViewAlbum_compact_preview.php

    r2823007 r3149367  
    9696        $href = $this->http_strip_query_param($href, 'bwg_search_' . $bwg);
    9797        $href = $this->http_strip_query_param($href, 'page_number_' . $bwg);
    98         $title = '<div class="bwg-title1"><div class="bwg-title2">' . ($row->name ? htmlspecialchars_decode($row->name, ENT_COMPAT | ENT_QUOTES) : '&nbsp;') . '</div></div>';
     98        $title = '<div class="bwg-title1"><div class="bwg-title2">' . ($row->name ? wp_kses_post(htmlspecialchars_decode($row->name, ENT_COMPAT | ENT_QUOTES)) : '&nbsp;') . '</div></div>';
    9999        $resolution_thumb = $row->resolution_thumb;
    100100        $image_thumb_width = '';

  • photo-gallery/trunk/frontend/views/BWGViewThumbnails.php

    r2750908 r3149367  
    3838        $data_image_id = '';
    3939        $href = '';
    40         $title = '<div class="bwg-title1"><div class="bwg-title2">' . ($image_row->alt ? htmlspecialchars_decode($image_row->alt, ENT_COMPAT | ENT_QUOTES) : '&nbsp;') . '</div></div>';
    41         $description = '<div class="bwg-thumb-description bwg_thumb_description_0"><span>' . ($image_row->description ? htmlspecialchars_decode($image_row->description, ENT_COMPAT | ENT_QUOTES) : '') . '</span></div>';
     40        $title = '<div class="bwg-title1"><div class="bwg-title2">' . ($image_row->alt ? wp_kses_post(htmlspecialchars_decode($image_row->alt, ENT_COMPAT | ENT_QUOTES)) : '&nbsp;') . '</div></div>';
     41        $description = '<div class="bwg-thumb-description bwg_thumb_description_0"><span>' . ($image_row->description ? wp_kses_post(htmlspecialchars_decode($image_row->description, ENT_COMPAT | ENT_QUOTES)) : '') . '</span></div>';
    4242        $play_icon = '<div class="bwg-play-icon1"><i title="' . __('Play', 'photo-gallery') . '" class="bwg-icon-play bwg-title2 bwg-play-icon2"></i></div>';
    4343        $ecommerce_icon = '<div class="bwg-ecommerce1"><div class="bwg-ecommerce2">';

  • photo-gallery/trunk/frontend/views/BWGViewThumbnails_masonry.php

    r2764916 r3149367  
    4848        $data_image_id = '';
    4949        $href = '';
    50             $title = '<div class="bwg-title1"><div class="bwg-title2">' . htmlspecialchars_decode($image_row->alt, ENT_COMPAT | ENT_QUOTES) . '</div></div>';
     50            $title = '<div class="bwg-title1"><div class="bwg-title2">' . wp_kses_post(htmlspecialchars_decode($image_row->alt, ENT_COMPAT | ENT_QUOTES)) . '</div></div>';
    5151        $play_icon = '<div class="bwg-play-icon1"><i title="' . __('Play', 'photo-gallery') . '" class="bwg-icon-play bwg-title2 bwg-play-icon2"></i></div>';
    5252        $ecommerce_icon = '<div class="bwg-ecommerce1"><div class="bwg-ecommerce2">';

  • photo-gallery/trunk/photo-gallery.php

    r3114481 r3149367  
    44 * Plugin URI: https://10web.io/plugins/wordpress-photo-gallery/?utm_source=photo_gallery&utm_medium=free_plugin
    55 * Description: This plugin is a fully responsive gallery plugin with advanced functionality.  It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
    6  * Version: 1.8.27
     6 * Version: 1.8.28
    77 * Author: Photo Gallery Team
    88 * Author URI: https://10web.io/plugins/?utm_source=photo_gallery&utm_medium=free_plugin
    … …  
    109109    $this->front_url = $this->plugin_url;
    110110    $this->main_file = plugin_basename(__FILE__);
    111     $this->plugin_version = '1.8.27';
    112     $this->db_version = '1.8.27';
     111    $this->plugin_version = '1.8.28';
     112    $this->db_version = '1.8.28';
    113113    $this->prefix = 'bwg';
    114114    $this->nicename = __('Photo Gallery', 'photo-gallery');

  • photo-gallery/trunk/readme.txt

    r3147190 r3149367  
    44Requires at least: 4.6
    55Tested up to: 6.6
    6 Stable tag: 1.8.27
     6Stable tag: 1.8.28
    77License: GPLv2 or later
    88License URI: http://www.gnu.org/licenses/gpl-2.0.html
    … …  
    273273
    274274== Changelog ==
     275
     276= 1.8.28 =
     277* Fixed: Security fix.
    275278
    276279= 1.8.27 =
Note: See TracChangeset for help on using the changeset viewer.