2.4.4 Release

whywilson · Feb 1, 2023 · 670e1aa · 670e1aa
1 parent ad6b25b
commit 670e1aa
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/auto-bulb-finder.php b/auto-bulb-finder.php
@@ -3,7 +3,7 @@
 Plugin Name: Auto Bulb Finder for WP & WC
 Plugin URI:  https://auto.mtoolstec.com
 Description: Year/Make/Model/BodyType/Qualifer automoive bulb size querying system for vehicles from 1960 to 2022. Online database or custom vehicle list. Add to any page or content by a shortcode <code>[abf]</code>.
-Version:     2.4.3
+Version:     2.4.4
 Author:      MTools Tec
 Author URI:  https://shop.mtoolstec.com/about-us/
 License:     GPL

diff --git a/readme.txt b/readme.txt
@@ -5,7 +5,7 @@ Donate link: https://auto.mtoolstec.com/donate
 Requires at least: 6.0
 Tested up to: 6.1.1
 Requires PHP: 7.4
-Stable tag: 2.4.2
+Stable tag: 2.4.4
 License: GPL v2
 License URI: https://auto.mtoolstec.com/license
 

diff --git a/templates/admin/vehicles/class-abfinder-vehicles-list.php b/templates/admin/vehicles/class-abfinder-vehicles-list.php
@@ -68,7 +68,7 @@ public function prepare_items()
 		{
 			$search_val = '';
 			if (!empty($_REQUEST['s'])) {
-				$search_val = $_REQUEST['s'];
+				$search_val = sanitize_text_field($_REQUEST['s']);
 			}
 			$columns               = $this->get_columns();
 			$sortable              = $this->get_sortable_columns();
@@ -102,7 +102,7 @@ public function abfinder_qrecord_count($search_val)
 			$table_name      = $this->wpdb->prefix . 'abfinder_vehicles';
 			$table_name_post = $this->wpdb->prefix . 'posts';
 			if ('' !== $search_val) { ?>
-				Search results for: <strong><?php echo $search_val; ?></strong>
+				Search results for: <strong><?php echo esc_html($search_val); ?></strong>
 				<?php
 			}
 			$count = $this->wpdb->get_var("SELECT COUNT(*) FROM $table_name");