Ticket #57165: 57165.diff

src/wp-includes/widgets/class-wp-widget-archives.php

@@ -59 +59 @@
                 if ( $dropdown ) {
                         $dropdown_id = "{$this->id_base}-dropdown-{$this->number}";
                         ?>
-                <label class="screen-reader-text" for="<?php echo esc_attr( $dropdown_id ); ?>"><?php echo $title; ?></label>
+                <label class="screen-reader-text" for="<?php echo esc_attr( $dropdown_id ); ?>"><?php echo esc_html( $title ); ?></label>
                 <select id="<?php echo esc_attr( $dropdown_id ); ?>" name="archive-dropdown">
                         <?php
                         /**