You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Unescaped $interrupted_offset in resume form: get_option('wc_tax_retrofit_current_offset') output was interpolated directly in an HTML hidden input value attribute without intval(). Internal integer with no user input path, but inconsistent with the systematic escaping applied in v1.4.2. Fixed with intval()
Unescaped $checked in status checkboxes: hardcoded 'checked' / '' string output without esc_attr() in the subscription status fieldset, while the adjacent $status_key was already escaped. Fixed with esc_attr()