Ticket #58831: 58831-escaping-function-missing-twentyeleven.patch

wp-content/themes/twentyeleven/functions.php

@@ -764 +764 @@
                                         ?>
 
                                         <?php if ( '0' === $comment->comment_approved ) : ?>
-                                        <em class="comment-awaiting-moderation"><?php echo $moderation_note; ?></em>
+                                        <em class="comment-awaiting-moderation"><?php echo esc_html( $moderation_note ); ?></em>
                                         <br />
                                         <?php endif; ?>