| @@ -390,9 +390,9 @@ | ||
| 390 | 390 | if (!isset($_GET['_wpnonce']) || !wp_verify_nonce($_GET['_wpnonce'], 'metasync_custom_pages_action')) { |
| 391 | 391 | return; |
| 392 | 392 | } |
| 393 | 393 | |
| 394 | - $action = sanitize_text_field($_GET['action']); | |
| 394 | + $action = sanitize_text_field(wp_unslash($_GET['action'])); | |
| 395 | 395 | |
| 396 | 396 | switch ($action) { |
| 397 | 397 | case 'delete': |
| 398 | 398 | if (isset($_GET['page_id'])) { |
