Ticket #24580: media_patch.diff

media.php

@@ -2383 +2383 @@
         <div class="wp_attachment_details edit-form-section">
                 <p>
                         <label for="attachment_caption"><strong><?php _e( 'Caption' ); ?></strong></label><br />
-                        <textarea class="widefat" name="excerpt" id="attachment_caption"><?php echo $post->post_excerpt; ?></textarea>
+                        <textarea class="widefat" name="excerpt" id="attachment_caption"><?php echo esc_textarea( $post->post_excerpt ); ?></textarea>
                 </p>
 
         <?php if ( 'image' === substr( $post->post_mime_type, 0, 5 ) ) : ?>