Changeset 2923581

Timestamp:

06/08/2023 05:44:10 PM (3 years ago)

Author:

lanacodes

Message:

Version update

Location:

lana-email-logger/trunk

Files:

• assets/css/lana-email-logger-admin.css (modified) (1 diff)
• includes/class-lana-email-logger-logs-list-table.php (modified) (5 diffs)
• lana-email-logger.php (modified) (4 diffs)
• readme.txt (modified) (5 diffs)

lana-email-logger/trunk/assets/css/lana-email-logger-admin.css

@@ -8 +8 @@
 body.admin_page_lana-email-view #poststuff #post-body-content pre {
     font-family: inherit;
+    overflow: auto;
 }
 

lana-email-logger/trunk/includes/class-lana-email-logger-logs-list-table.php

@@ -86 +86 @@
      */
     public function column_cb( $item ) {
-        return sprintf( '<input type="checkbox" name="lana_email_logger_log[]" value="%s" />', $item->id );
+        return sprintf( '<input type="checkbox" name="lana_email_logger_log[]" value="%s" />', esc_attr( $item->id ) );
     }
 
@@ -100 +100 @@
         $log_view_url = esc_url( admin_url( 'admin.php?page=lana-email-view.php&id=' . $item->id ) );
 
-        return sprintf( '<a href="%s">#%s &ndash; %s</a>', $log_view_url, $item->id, $item->subject );
+        return sprintf( '<a href="%s">#%s &ndash; %s</a>', $log_view_url, esc_html( $item->id ), esc_html( $item->subject ) );
     }
 
@@ -121 +121 @@
         $user_edit_url = esc_url( admin_url( 'user-edit.php?user_id=' . $user->ID ) );
 
-        return sprintf( '<a href="%s">%s &ndash; %s</a>', $user_edit_url, $user->user_login, $user->user_email );
+        return sprintf( '<a href="%s">%s &ndash; %s</a>', $user_edit_url, esc_html( $user->user_login ), esc_html( $user->user_email ) );
     }
 
@@ -132 +132 @@
      */
     public function column_email_to( $item ) {
-        return $item->email_to;
+        return esc_html( $item->email_to );
     }
 
@@ -150 +150 @@
         $date_content = sprintf( __( '%s ago', 'lana-email-logger' ), human_time_diff( strtotime( $item->date ), current_time( 'timestamp' ) ) );
 
-        return sprintf( '<time title="%s">%s</time>', $date_title, $date_content );
+        return sprintf( '<time title="%s">%s</time>', esc_attr( $date_title ), esc_html( $date_content ) );
     }
 

lana-email-logger/trunk/lana-email-logger.php

@@ -2 +2 @@
 /**
  * Plugin Name: Lana Email Logger
- * Plugin URI: http://lana.codes/lana-product/lana-email-logger/
+ * Plugin URI: https://lana.codes/product/lana-email-logger/
  * Description: Logs all emails sent by WordPress.
- * Version: 1.0.2
+ * Version: 1.1.0
  * Author: Lana Codes
- * Author URI: http://lana.codes/
+ * Author URI: https://lana.codes/
  * Text Domain: lana-email-logger
  * Domain Path: /languages
@@ -12 +12 @@
 
 defined( 'ABSPATH' ) or die();
-define( 'LANA_EMAIL_LOGGER_VERSION', '1.0.2' );
+define( 'LANA_EMAIL_LOGGER_VERSION', '1.1.0' );
 define( 'LANA_EMAIL_LOGGER_DIR_URL', plugin_dir_url( __FILE__ ) );
 define( 'LANA_EMAIL_LOGGER_DIR_PATH', plugin_dir_path( __FILE__ ) );
@@ -450 +450 @@
 
         <hr/>
-        <a href="<?php echo esc_url( 'http://lana.codes/' ); ?>" target="_blank">
+        <a href="<?php echo esc_url( 'https://lana.codes/' ); ?>" target="_blank">
             <img src="<?php echo esc_url( LANA_EMAIL_LOGGER_DIR_URL . '/assets/img/plugin-header.png' ); ?>"
                  alt="<?php esc_attr_e( 'Lana Codes', 'lana-email-logger' ); ?>"/>
@@ -607 +607 @@
     global $wpdb;
 
-    $email_to = $mail['to'];
-    $subject  = $mail['subject'];
+    $email_to = sanitize_email( $mail['to'] );
+    $subject  = sanitize_text_field( $mail['subject'] );
     $message  = wp_strip_all_tags( $mail['message'] );
     $headers  = $mail['headers'];

lana-email-logger/trunk/readme.txt

@@ -1 +1 @@
 === Lana Email Logger ===
 Contributors: lanacodes
+Donate link: https://www.paypal.com/donate/?hosted_button_id=F34PNECNYHSA4
 Tags: email, wp mail, send email, log email, logger
 Requires at least: 4.0
-Tested up to: 6.0
-Stable tag: 1.0.2
+Tested up to: 6.2
+Stable tag: 1.1.0
 Requires PHP: 5.3
 License: GPLv2 or later
@@ -16 +17 @@
 
 = Lana Codes =
-[Lana Email Logger](http://lana.codes/lana-product/lana-email-logger/)
+[Lana Email Logger](https://lana.codes/product/lana-email-logger/)
 
 == Installation ==
@@ -38 +39 @@
 
 = Lana Codes =
-[Support](http://lana.codes/contact/)
+[Support](https://lana.codes/contact/)
 
 = WordPress Forum =
@@ -49 +50 @@
 
 == Changelog ==
+
+= 1.1.0 =
+* security (CVE-2023-3166): fixed stored XSS vulnerability (thanks to Alex Thomas)
+* bugfix email view message overflow
 
 = 1.0.2 =
@@ -61 +66 @@
 == Upgrade Notice ==
 
+= 1.1.0 =
+This version fixes a security vulnerability. Upgrade recommended.
+
 = 1.0.2 =
 This version fixes settings link.