Ticket #27942: 27942.2.patch

src/wp-includes/formatting.php

@@ -3302 +3302 @@
 
                 case 'blogdescription':
                 case 'blogname':
-                        $value = wp_kses_post( $value );
+                        $value = htmlentities2( $value );
                         $value = esc_html( $value );
                         break;