id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc
11782,improperly sanitized attributes in ms-options.php and ms-sites.php,Denis-de-Bernardy,ryan,"We've things such as:

{{{
<input name=""dashboard_blog_orig"" type=""hidden"" id=""dashboard_blog_orig"" value=""<?php echo $blogname; ?>"" />
}}}

they ought to use esc_attr()",defect (bug),closed,normal,3.0,Security,3.0,normal,fixed,multisite,