Ticket #53349: edit-form-comment.php.patch

edit-form-comment.php

@@ -52 +52 @@
 <tr>
         <td class="first"><label for="email"><?php _e( 'Email' ); ?></label></td>
         <td>
-                <input type="text" name="newcomment_author_email" size="30" value="<?php echo $comment->comment_author_email; ?>" id="email" />
+                <input type="text" name="newcomment_author_email" size="30" value="<?php echo esc_attr( $comment->comment_author_email ); ?>" id="email" />
         </td>
 </tr>
 <tr>