update: Security Update(Prevent Cross-Site Scripting)

themeum · Feb 5, 2025 · 90eef70 · 90eef70
1 parent 1038b66
commit 90eef70
Show file tree

Hide file tree

Showing 7 changed files with 21 additions and 15 deletions.
diff --git a/build/qubely/assets/js/qubely.min.js b/build/qubely/assets/js/qubely.min.js
diff --git a/build/qubely/core/blocks/postgrid.php b/build/qubely/core/blocks/postgrid.php
@@ -1414,9 +1414,9 @@ function qubely_excerpt_max_charlength($limit)
 	} else {
 		$col = "";
 	}
-	$class = 'wp-block-qubely-postgrid qubely-block-' . $uniqueId;
+	$class = 'wp-block-qubely-postgrid qubely-block-' . esc_attr($uniqueId);
 	if (isset($att['align'])) {
-		$class .= ' align' . $att['align'];
+		$class .= ' align' . esc_attr($att['align']);
 	}
 	if (isset($att['className'])) {
 		$class .= esc_attr($att['className']);

diff --git a/build/qubely/qubely.php b/build/qubely/qubely.php
@@ -3,12 +3,12 @@
  * Plugin Name:       Qubely - Advanced Gutenberg Blocks
  * Plugin URI:        https://www.themeum.com/
  * Description:       The one and only Gutenberg block plugin you will ever need.
- * Version:           1.8.12
+ * Version:           1.8.13
  * Author:            Themeum
  * Author URI:        https://www.themeum.com/
  * Text Domain:       qubely
  * Requires at least: 5.3
- * Tested up to:       6.6.2
+ * Tested up to:      6.7
  * License:           GPL-2.0+
  * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
  */
@@ -24,7 +24,7 @@ function qubely_language_load()
 }
 
 // Define Version
-define('QUBELY_VERSION', '1.8.12');
+define('QUBELY_VERSION', '1.8.13');
 
 // Define License
 define('QUBELY_LICENSE', 'free');

diff --git a/build/qubely/readme.txt b/build/qubely/readme.txt
@@ -3,8 +3,8 @@ Contributors: themeum
 Donate link: https://www.themeum.com
 Tags: blocks, gutenberg, gutenberg blocks, editor, block, page builder
 Requires at least: 5.3
-Tested up to: 6.6.2
-Stable tag: 1.8.12
+Tested up to: 6.7
+Stable tag: 1.8.13
 Requires PHP: 7.0
 License: GPL-2.0+
 License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -230,6 +230,9 @@ You can report bugs on the [support forum here](https://wordpress.org/support/pl
 
 == Changelog ==
 
+= 1.8.13 =
+Update: Security Update(Prevent Cross-Site Scripting)
+
 = 1.8.12 =
 Update: Added WordPress 6.6 Compatibility
 

diff --git a/core/blocks/postgrid.php b/core/blocks/postgrid.php
@@ -1414,9 +1414,9 @@ function qubely_excerpt_max_charlength($limit)
 	} else {
 		$col = "";
 	}
-	$class = 'wp-block-qubely-postgrid qubely-block-' . $uniqueId;
+	$class = 'wp-block-qubely-postgrid qubely-block-' . esc_attr($uniqueId);
 	if (isset($att['align'])) {
-		$class .= ' align' . $att['align'];
+		$class .= ' align' . esc_attr($att['align']);
 	}
 	if (isset($att['className'])) {
 		$class .= esc_attr($att['className']);

diff --git a/qubely.php b/qubely.php
@@ -3,12 +3,12 @@
  * Plugin Name:       Qubely - Advanced Gutenberg Blocks
  * Plugin URI:        https://www.themeum.com/
  * Description:       The one and only Gutenberg block plugin you will ever need.
- * Version:           1.8.12
+ * Version:           1.8.13
  * Author:            Themeum
  * Author URI:        https://www.themeum.com/
  * Text Domain:       qubely
  * Requires at least: 5.3
- * Tested up to:       6.6.2
+ * Tested up to:      6.7
  * License:           GPL-2.0+
  * License URI:       http://www.gnu.org/licenses/gpl-2.0.txt
  */
@@ -24,7 +24,7 @@ function qubely_language_load()
 }
 
 // Define Version
-define('QUBELY_VERSION', '1.8.12');
+define('QUBELY_VERSION', '1.8.13');
 
 // Define License
 define('QUBELY_LICENSE', 'free');

diff --git a/readme.txt b/readme.txt
@@ -3,8 +3,8 @@ Contributors: themeum
 Donate link: https://www.themeum.com
 Tags: blocks, gutenberg, gutenberg blocks, editor, block, page builder
 Requires at least: 5.3
-Tested up to: 6.6.2
-Stable tag: 1.8.12
+Tested up to: 6.7
+Stable tag: 1.8.13
 Requires PHP: 7.0
 License: GPL-2.0+
 License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -230,6 +230,9 @@ You can report bugs on the [support forum here](https://wordpress.org/support/pl
 
 == Changelog ==
 
+= 1.8.13 =
+Update: Security Update(Prevent Cross-Site Scripting)
+
 = 1.8.12 =
 Update: Added WordPress 6.6 Compatibility