Changeset 50825 for trunk/src/wp-admin/includes/plugin-install.php

Timestamp:

05/07/2021 01:48:12 PM (3 years ago)

Author:

SergeyBiryukov

Message:

Plugins: Escape the currently installed version number on Add Plugins screen.

The number is displayed in the plugin details modal if a newer version is already installed.

Props m0ze, bmcculley, ayeshrajans.
Fixes #53020.

File:

• trunk/src/wp-admin/includes/plugin-install.php (modified) (1 diff)

trunk/src/wp-admin/includes/plugin-install.php

@@ -881 +881 @@
             case 'newer_installed':
                 /* translators: %s: Plugin version. */
-                echo '<a class="button button-primary right disabled">' . sprintf( __( 'Newer Version (%s) Installed' ), $status['version'] ) . '</a>';
+                echo '<a class="button button-primary right disabled">' . sprintf( __( 'Newer Version (%s) Installed' ), esc_html( $status['version'] ) ) . '</a>';
                 break;
             case 'latest_installed':