diff --git a/includes/um-short-functions.php b/includes/um-short-functions.php index 91eb35e5..fd99493e 100644 --- a/includes/um-short-functions.php +++ b/includes/um-short-functions.php @@ -2503,7 +2503,7 @@ function um_user( $data, $attrs = null ) { case 'profile_photo': $data = um_get_user_avatar_data( um_user( 'ID' ), $attrs ); - return sprintf( '%s', + return sprintf( '%s', esc_attr( $data['url'] ), esc_attr( $data['class'] ), esc_attr( $data['size'] ), @@ -2553,7 +2553,7 @@ function um_user( $data, $attrs = null ) { $alt = um_profile( 'nickname' ); - $cover_html = $cover_uri ? '' . esc_attr( $alt ) . '' : ''; + $cover_html = $cover_uri ? '' . esc_attr( $alt ) . '' : ''; $cover_html = apply_filters( 'um_user_cover_photo_html__filter', $cover_html, $cover_uri, $alt, $is_default, $attrs ); return $cover_html;