Changeset 3318491

Timestamp:

06/26/2025 08:14:21 PM (9 months ago)

Author:

nikelschubert

Message:

FIX: XSS Vulnerability (CVE-2025-6673)

Location:

easy-pdf-restaurant-menu-upload

Files:

• tags/2.0.2 (added)
• tags/2.0.2/LICENCE (added)
• tags/2.0.2/admin (added)
• tags/2.0.2/admin/js (added)
• tags/2.0.2/admin/js/admin.js (added)
• tags/2.0.2/admin/tpl (added)
• tags/2.0.2/admin/tpl/admin.php (added)
• tags/2.0.2/admin/tpl/tab_description_help.html (added)
• tags/2.0.2/admin/tpl/tab_upload_description.html (added)
• tags/2.0.2/class (added)
• tags/2.0.2/class/class-admin-html-formfields-nsc_eprm.php (added)
• tags/2.0.2/class/class-admin-settings-nsc_eprm.php (added)
• tags/2.0.2/class/class-api-nsc_eprm.php (added)
• tags/2.0.2/class/class-download-file-nsc_eprm.php (added)
• tags/2.0.2/class/class-gutenberg-blocks-nsc_eprm.php (added)
• tags/2.0.2/class/class-input-validation-nsc_eprm.php (added)
• tags/2.0.2/class/class-plugin-configs-nsc_eprm.php (added)
• tags/2.0.2/class/class-uninstall-nsc_eprm.php (added)
• tags/2.0.2/class/class_admin_easy_pdf_restaurant_menu.php (added)
• tags/2.0.2/nsc_easy-pdf-restaurant-menu.php (added)
• tags/2.0.2/plugin-config.json (added)
• tags/2.0.2/public (added)
• tags/2.0.2/public/js (added)
• tags/2.0.2/public/js/gutenberg (added)
• tags/2.0.2/public/js/gutenberg/name.asset.php (added)
• tags/2.0.2/public/js/gutenberg/name.js (added)
• tags/2.0.2/readme.txt (added)
• tags/2.0.2/uninstall.php (added)
• trunk/class/class_admin_easy_pdf_restaurant_menu.php (modified) (1 diff)
• trunk/nsc_easy-pdf-restaurant-menu.php (modified) (1 diff)
• trunk/readme.txt (modified) (2 diffs)

easy-pdf-restaurant-menu-upload/trunk/class/class_admin_easy_pdf_restaurant_menu.php

@@ -382 +382 @@
         $link = '<a href="' . esc_url_raw($linkTarget) . '" ' . $attributesString . $nofollowString . '>' . esc_html($anchorText) . '</a>';
         if ($withP === 'true') {
-            $link = '<p id="nsc_eprm_download_link_wrapper_' . $menuType . '" class="nsc_eprm_download_link_wrapper">' . $link . '</p>';
+            $link = '<p id="nsc_eprm_download_link_wrapper_' . esc_attr($menuType) . '" class="nsc_eprm_download_link_wrapper">' . $link . '</p>';
         }
         return $link;

easy-pdf-restaurant-menu-upload/trunk/nsc_easy-pdf-restaurant-menu.php

@@ -6 +6 @@
 Author URI:        https://beautiful-wp.com/
 Plugin URI:        https://beautiful-wp.com/wordpress-plugin/easy-pdf-restaurant-menu-upload-food-menu/
-Version: 2.0.1
+Version: 2.0.2
 Text Domain: easy-pdf-restaurant-menu
 License:           GPLv3 with Additional Terms

easy-pdf-restaurant-menu-upload/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 6.8
 Requires PHP: 7.0.0
-Stable tag: 2.0.1
+Stable tag: 2.0.2
 License: GPLv3
 
@@ -66 +66 @@
 == Changelog ==
 
-= 2.0.1
+= 2.0.2 =
+- FIX: XSS Vulnerability (CVE-2025-6673)
+
+= 2.0.1 =
 - Added Plugin URI