diff --git a/includes/core/class-access.php b/includes/core/class-access.php index 3955da75..660c291b 100644 --- a/includes/core/class-access.php +++ b/includes/core/class-access.php @@ -1220,7 +1220,13 @@ if ( ! class_exists( 'um\core\Access' ) ) { if ( $block['attrs']['um_message_type'] == '1' ) { $block_content = $default_message; } elseif ( $block['attrs']['um_message_type'] == '2' ) { - $block_content = $block['attrs']['um_message_content']; + $block_content = sanitize_textarea_field( $block['attrs']['um_message_content'] ); + + + + + + } } } @@ -1234,7 +1240,7 @@ if ( ! class_exists( 'um\core\Access' ) ) { if ( $block['attrs']['um_message_type'] == '1' ) { $block_content = $default_message; } elseif ( $block['attrs']['um_message_type'] == '2' ) { - $block_content = $block['attrs']['um_message_content']; + $block_content = sanitize_textarea_field( $block['attrs']['um_message_content'] ); } } }