fix XSS vulnerability

Kredeum · Dec 31, 2024 · 87e18e1 · 87e18e1
1 parent 48a0956
commit 87e18e1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/wordpress/plugins/kredeum-nfts/common/shortcode/shortcode.php b/wordpress/plugins/kredeum-nfts/common/shortcode/shortcode.php
@@ -31,7 +31,7 @@ function add_shortcode_callback( $atts = array(), $content = null, $tag = '' ) {
 		$atts
 	);
 
-	$o  = '<div id="' . str_replace( '_', '-', $tag ) . '" chainid="' . $args['chainid'] . '" address="' . $args['address'] . '" tokenid="' . $args['tokenid'] . '">';
+	$o  = '<div id="' . esc_attr(str_replace( '_', '-', $tag )) . '" chainid="' . esc_attr($args['chainid']) . '" address="' . esc_attr($args['address']) . '" tokenid="' . esc_attr($args['tokenid']) . '">';
 	$o .= '</div>';
 	return $o;
 };