Merge pull request #39 from brainstormforce/issue-report

EPS-474: Security issue for Cards for BB

README.md

@@ -3,7 +3,7 @@
 **Donate link:** https://www.paypal.me/BrainstormForce  
 **Requires at least:** 4.4  
 **Tags:** beaver builder, page builder plugin, bootstrap cards, cards, bootstrap, drag and drop cards, bb bootstrap, Cards for Beaver Builder  
-**Stable tag:** 1.1.2  
+**Stable tag:** 1.1.3  
 **Tested up to:** 6.4.1  
 **License:** GPLv2 or later  
 **License URI:** http://www.gnu.org/licenses/gpl-2.0.html  
@@ -88,6 +88,9 @@ Visit our website to know more about the top WordPress products and services we
 
 ## Changelog ##
 
+### 1.1.3 ###
+Security Fix: Hardened the security of the plugin. Props: Wordfence.
+
 ### 1.1.2 ###
 * Improvement: Added compatibility to WordPress 6.1
 

bb-bootstrap-cards-module/includes/frontend.php

@@ -43,11 +43,11 @@
 			<!--/.Text-->	
 			<!--Link--> 
 			<?php if ( 'link' == $settings->card_btn_type ) { ?>  
-			<a class="bb_boot_card_link" href="<?php echo $settings->link_field; ?>" target="<?php echo $settings->link_target; ?>">
+			<a class="bb_boot_card_link" href="<?php echo esc_url( $settings->link_field ); ?>" target="<?php echo esc_attr( $settings->link_target ); ?>">
 				<?php echo $settings->card_btn_text; ?>
 			</a>
 		<?php } elseif ( 'button' == $settings->card_btn_type ) { ?>
-			<a class="bb_boot_card_link_button" href="<?php echo $settings->btn_link; ?>" target="<?php echo $settings->btn_link_target; ?>">
+			<a class="bb_boot_card_link_button" href="<?php echo esc_url( $settings->btn_link ); ?>" target="<?php echo esc_attr( $settings->btn_link_target ); ?>">
 				<span class="bb_boot_button"><?php echo $settings->btn_text; ?></span>
 			</a>	
 		<?php } ?>

bb-bootstrap-cards.php.php

@@ -6,7 +6,7 @@
  * Author:          Pratik Chaskar
  * Author URI:      https://pratikchaskar.com/
  * Text Domain:     bb-bootstrap-cards
- * Version:         1.1.2
+ * Version:         1.1.3
  *
  * @package         BB-Bootstrap-Cards
  */

readme.txt

@@ -3,7 +3,7 @@ Contributors: pratikchaskar
 Donate link: https://www.paypal.me/BrainstormForce
 Requires at least: 4.4
 Tags: beaver builder, page builder plugin, bootstrap cards, cards, bootstrap, drag and drop cards, bb bootstrap, Cards for Beaver Builder
-Stable tag: 1.1.2
+Stable tag: 1.1.3
 Tested up to: 6.4.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -88,6 +88,9 @@ Visit our website to know more about the top WordPress products and services we
 
 == Changelog ==
 
+= 1.1.3 =
+Security Fix: Hardened the security of the plugin. Props: Wordfence.
+
 = 1.1.2 =
 * Improvement: Added compatibility to WordPress 6.1