Astra widgets security fix - Cross site scripting

README.md

@@ -5,7 +5,7 @@
 **Requires at least:** 4.7
 **Tested up to:** 6.7
 **Requires PHP:** 5.2
-**Stable tag:** 1.2.15
+**Stable tag:** 1.2.16
 **License:** GPLv2 or later
 **License URI:** http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -75,6 +75,11 @@ In your WordPress admin dashboard go to Appearance -> Widgets, drag the Astra :
 3. Navigate to Appearance -> Widgets to access the widgets available from the plugin.
 
 ## Changelog ##
+### 1.2.16 ###
+- Improved codebase for improved security. (Props to Patchstack)
+
+### 1.2.15 ###
+- Improved codebase for improved security. (Props to Patchstack)
 
 ### 1.2.14 ###
 - Fix: Astra Widgets - Address widget Font turns to Italic style.

astra-widgets.php

@@ -3,7 +3,7 @@
  * Plugin Name: Astra Widgets
  * Plugin URI: https://wpastra.com/
  * Description: The Fastest Way to Add More Widgets into Your WordPress Website.
- * Version: 1.2.15
+ * Version: 1.2.16
  * Author: Brainstorm Force
  * Author URI: https://www.brainstormforce.com
  * Text Domain: astra-widgets

classes/widgets/class-astra-widget-list-icons.php

@@ -201,7 +201,7 @@ public function widget( $args, $instance ) {
 							?>
 							<li>
 								<div class="link">
-									<a href="<?php echo esc_attr( $list['link'] ); ?>" class="list-item-link" target="<?php echo esc_attr( $target ); ?>" rel="<?php echo esc_attr( $rel ); ?>" aria-label="<?php echo ( is_object( $list_data ) ) ? esc_html( $list_data->name ) : ''; ?>">
+									<a href="<?php echo esc_url( $list['link'] ); ?>" class="list-item-link" target="<?php echo esc_attr( $target ); ?>" rel="<?php echo esc_attr( $rel ); ?>" aria-label="<?php echo ( is_object( $list_data ) ) ? esc_html( $list_data->name ) : ''; ?>">
 									<?php if ( 'icon' === $list['imageoricon'] ) { ?>
 										<div class="icon">
 											<span class="<?php echo ( is_object( $list_data ) ) ? esc_attr( $list_data->name ) : ''; ?>">

package.json

@@ -1,6 +1,6 @@
 {
   "name": "astra-widgets",
-  "version": "1.2.15",
+  "version": "1.2.16",
   "description": "[![pipeline status](http://git.brainstormforce.com/astra/astra-widgets/badges/master/pipeline.svg)](http://git.brainstormforce.com/astra/astra-widgets/commits/master)",
   "main": "Gruntfile.js",
   "scripts": {

readme.txt

@@ -5,7 +5,7 @@ Tags: Address widget, Social profile widget, List icon widget, Social media, Add
 Requires at least: 4.7
 Tested up to: 6.7
 Requires PHP: 5.2
-Stable tag: 1.2.15
+Stable tag: 1.2.16
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -76,6 +76,9 @@ In your WordPress admin dashboard go to Appearance -> Widgets, drag the Astra :
 
 == Changelog ==
 
+= 1.2.16 =
+- Improved codebase for improved security. (Props to Patchstack.).
+
 = 1.2.15 =
 - Improved codebase for improved security. (Props to Patchstack.).