Ticket #44916: 44916.diff

wp-includes/class-walker-nav-menu.php

@@ -218 +218 @@
                  * @param stdClass $args  An object of wp_nav_menu() arguments.
                  * @param int      $depth Depth of menu item. Used for padding.
                  */
-                $title = apply_filters( 'nav_menu_item_title', $title, $item, $args, $depth );
+                $title = esc_html( apply_filters( 'nav_menu_item_title', $title, $item, $args, $depth ) );
 
                 $item_output  = $args->before;
                 $item_output .= '<a' . $attributes . '>';