diff --git a/php/classes/class-qsm-fields.php b/php/classes/class-qsm-fields.php index e8f4c6061..f085aad69 100644 --- a/php/classes/class-qsm-fields.php +++ b/php/classes/class-qsm-fields.php @@ -31,7 +31,7 @@ public static function generate_section( $fields, $section ) { if ( ( isset( $_POST[ $field["id"] ] ) && 'multiple_fields' !== $field["type"] ) || 'selectinput' == $field["type"] ) { switch ( $field["type"] ) { case 'text': - $sanitized_value = sanitize_text_field( wp_unslash( $_POST[ $field["id"] ] ) ); + $sanitized_value = esc_html( sanitize_text_field( wp_unslash( $_POST[ $field["id"] ] ) ) ); break; case 'url':