From ce3f1368609173f6f7fcdc29ccc3202c6ab66add Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Fri, 8 Mar 2024 16:42:59 +0530 Subject: [PATCH 01/11] esc data --- modules/flip-box/includes/frontend.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/flip-box/includes/frontend.php b/modules/flip-box/includes/frontend.php index a93388ee..1e969898 100644 --- a/modules/flip-box/includes/frontend.php +++ b/modules/flip-box/includes/frontend.php @@ -33,7 +33,7 @@ title_back ) { ?> - <back_title_typography_tag_selection; ?> class="uabb-back-text-title">title_back; ?>back_title_typography_tag_selection; ?>> + <back_title_typography_tag_selection ); ?> class="uabb-back-text-title">title_back ); ?>back_title_typography_tag_selection ); ?>> desc_back ) { From fb3ab289228a62b0c6e30b34a5e17cafb39554c8 Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 11:58:59 +0530 Subject: [PATCH 02/11] Added changelog --- README.md | 1 + readme.txt | 1 + 2 files changed, 2 insertions(+) diff --git a/README.md b/README.md index 3462127a..7a3b9df0 100644 --- a/README.md +++ b/README.md @@ -216,6 +216,7 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in ## Changelog ## ### 1.5.7.1 ### +* Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team. * Fixed: Info List - Undefined variable issue with PHP 8. ### 1.5.7 ### diff --git a/readme.txt b/readme.txt index a63d7a4a..72a79b4b 100644 --- a/readme.txt +++ b/readme.txt @@ -216,6 +216,7 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in == Changelog == = 1.5.7.1 = +* Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team. * Fixed: Info List - Undefined variable issue with PHP 8. = 1.5.7 = From 0457eb9635d66a7aa7d487d0a83c5c25578f3fa7 Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 13:16:01 +0530 Subject: [PATCH 03/11] advance-icon esc_url --- modules/advanced-icon/includes/frontend.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/advanced-icon/includes/frontend.php b/modules/advanced-icon/includes/frontend.php index d26e422a..cba2b0ff 100644 --- a/modules/advanced-icon/includes/frontend.php +++ b/modules/advanced-icon/includes/frontend.php @@ -19,7 +19,7 @@ if ( ! empty( $icon->connections->link ) && empty( $icon->link ) && ! FLBuilderModel::is_builder_active() ) { echo ''; } else { - echo 'link_target, $icon->link_nofollow, 0 ) ) . '>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped + echo 'link_target, $icon->link_nofollow, 0 ) ) . '>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped $imageicon_array = array( /* General Section */ From cb1e4b9910e762b6282d69035656d742f3c0be7f Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 13:53:01 +0530 Subject: [PATCH 04/11] button-widget santize --- modules/uabb-button/includes/frontend.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/uabb-button/includes/frontend.php b/modules/uabb-button/includes/frontend.php index 52e02b3c..23537466 100644 --- a/modules/uabb-button/includes/frontend.php +++ b/modules/uabb-button/includes/frontend.php @@ -22,7 +22,7 @@ - link_target, $link_nofollow, 1 ); ?>class="uabb-button uabb-creative-button style . '-btn'; ?> get_button_style(); ?> a_class ) ) ? $settings->a_class : ''; ?> " a_data ) ) ? $settings->a_data : ''; ?> role="button"> + link_target ), $link_nofollow, 1 ); ?>class="uabb-button uabb-creative-button style ) . '-btn'; ?> get_button_style() ); ?> a_class ) ) ? esc_attr( $settings->a_class ) : ''; ?> " a_data ) ) ? esc_attr( $settings->a_data ) : ''; ?> role="button"> icon ) && ( 'before' == $settings->icon_position || ! isset( $settings->icon_position ) ) ) : From 6cda69d282d0d84295081dc5d36e5e9959bb27f1 Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 15:03:22 +0530 Subject: [PATCH 05/11] info-table sanitize --- modules/info-table/includes/frontend.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modules/info-table/includes/frontend.php b/modules/info-table/includes/frontend.php index 36d2a1bf..e7e62f99 100644 --- a/modules/info-table/includes/frontend.php +++ b/modules/info-table/includes/frontend.php @@ -26,7 +26,7 @@ sub_heading_tag_selection . '>'; ?> it_link_type && 'design02' == $settings->box_design ) { ?>
- it_link_target, $link_nofollow, 1 ); ?>>button_text; ?> + it_link_target ), $link_nofollow, 1 ); ?>>button_text ); ?>
@@ -73,7 +73,7 @@ it_link_type && 'design02' != $settings->box_design ) { ?>
- button_text; ?> + button_text ); ?>
From 2b3f3ce13f802354889e328bbd704db60c514706 Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 16:20:11 +0530 Subject: [PATCH 06/11] heading sanitize --- modules/uabb-heading/includes/frontend.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/uabb-heading/includes/frontend.php b/modules/uabb-heading/includes/frontend.php index b6c13f66..f83d1e2c 100644 --- a/modules/uabb-heading/includes/frontend.php +++ b/modules/uabb-heading/includes/frontend.php @@ -35,7 +35,7 @@ <tag; ?> class="uabb-heading"> link ) ) : ?> - link_target, $settings->link_nofollow, 1 ); ?>> + link_target ), $settings->link_nofollow, 1 ); ?>> heading; ?> link ) ) : ?> From 20244c9f4f2fef98cc72bdeb7daa87531ac01060 Mon Sep 17 00:00:00 2001 From: Vijeta Raikar <110518282+vijetaR@users.noreply.github.com> Date: Tue, 12 Mar 2024 16:46:11 +0530 Subject: [PATCH 07/11] image-sep santize --- modules/image-separator/includes/frontend.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/image-separator/includes/frontend.php b/modules/image-separator/includes/frontend.php index 3a3477e4..96e96d56 100644 --- a/modules/image-separator/includes/frontend.php +++ b/modules/image-separator/includes/frontend.php @@ -11,7 +11,7 @@ ?>
enable_link ) : ?> - +