escape everything

[curtismchale]

See:

wp-proud-care/wp-proud-care.php

Line 21 in d8fe27d

'href' => admin_url('admin.php?page=proudcity-care-page'), // Link to ProudCity Care page

You should be escaping this url as well.

esc_url( admin_url( `your stuff` ) );