- fixed sanitizing the description field with allowed HTML inside;

includes/admin/core/class-admin-dragdrop.php

@@ -59,7 +59,7 @@ if ( ! class_exists( 'um\admin\core\Admin_DragDrop' ) ) {
 			}
 
 			foreach ( $_POST as $key => $value ) {
-
+				// don't use sanitize_key here because of a key can be in Uppercase
 				$key = sanitize_text_field( $key );
 
 				// adding rows

includes/core/class-form.php

@@ -579,7 +579,7 @@ if ( ! class_exists( 'um\core\Form' ) ) {
 											$form[ $k ] = (int) $form[ $k ];
 											break;
 										case 'textarea':
-											if ( ! empty( $field['html'] ) ) {
+											if ( ! empty( $field['html'] ) || ( UM()->profile()->get_show_bio_key( $form ) === $k && UM()->options()->get( 'profile_show_html_bio' ) ) ) {
 												$form[ $k ] = wp_kses_post( $form[ $k ] );
 											} else {
 												$form[ $k ] = sanitize_textarea_field( $form[ $k ] );