| @@ -27,9 +27,9 @@ | ||
| 27 | 27 | |
| 28 | 28 | $html = ''; |
| 29 | 29 | |
| 30 | 30 | if ( ! empty( $attributes['title'] ) ) { |
| 31 | - $html .= $before_title . $attributes['title'] . $after_title; | |
| 31 | + $html .= $before_title . esc_html( $attributes['title'] ) . $after_title; | |
| 32 | 32 | } |
| 33 | 33 | |
| 34 | 34 | $html .= '<div class="wp-widget-group__inner-blocks">'; |
| 35 | 35 | foreach ( $block->inner_blocks as $inner_block ) { |
