Changeset 357035

Timestamp:

11/04/2026 03:51:07 AM (5 days ago)

Author:

themedropbox

Message:

New version of Blogus - 3.2.1

Location:

blogus/3.2.1

Files:

• . (copied) (copied from blogus/3.2.0 )
• inc/ansar/breadcrumb-trail/breadcrumbs.php (modified) (2 diffs)
• inc/ansar/customize/controls/customize-control-helper.php (modified) (1 diff)
• inc/ansar/global/schema-markup/schema-markup.php (modified) (1 diff)
• inc/ansar/hooks/hook-index-main.php (modified) (1 diff)
• inc/ansar/widgets/widget-author-info.php (modified) (3 diffs)
• inc/ansar/widgets/widget-featured-post-widget.php (modified) (2 diffs)
• inc/ansar/widgets/widget-recent-post.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• style-rtl.css (modified) (1 diff)
• style.css (modified) (1 diff)

blogus/3.2.1/inc/ansar/breadcrumb-trail/breadcrumbs.php

@@ -738 +738 @@
         // Add the author's display name to the trail end.
         if ( is_paged() )
-            $this->items[] = sprintf( '<a href="%s">%s</a>', esc_url( get_author_posts_url( $user_id ) ), get_the_author_meta( 'display_name', $user_id ) );
+            $this->items[] = sprintf( '<a href="%s">%s</a>', esc_url( get_author_posts_url( $user_id ) ), esc_html( get_the_author_meta( 'display_name', $user_id ) ) );
 
         elseif ( true === $this->args['show_title'] )
-            $this->items[] = get_the_author_meta( 'display_name', $user_id );
+            $this->items[] = esc_html( get_the_author_meta( 'display_name', $user_id ) );
     }
 
@@ -1182 +1182 @@
 
             // Add the formatted term link to the array of parent terms.
-            $parents[] = sprintf( '<a href="%s">%s</a>', esc_url( get_term_link( $term, $taxonomy ) ), $term->name );
+            $parents[] = sprintf( '<a href="%s">%s</a>', esc_url( get_term_link( $term, $taxonomy ) ), esc_html( $term->name ) );
 
             // Set the parent term's parent as the parent ID.

blogus/3.2.1/inc/ansar/customize/controls/customize-control-helper.php

@@ -214 +214 @@
                     <input class="image-select" type="radio" value="<?php echo esc_attr( $value ); ?>" id="<?php echo $this->id . $value; ?>" name="<?php echo esc_attr( $name ); ?>" <?php $this->link(); checked( $this->value(), $value ); ?>>
                         <label for="<?php echo $this->id . $value; ?>">
-                            <img src="<?php echo esc_html( $label ); ?>" alt="<?php echo esc_attr( $value ); ?>" title="<?php echo esc_attr( $value ); ?>">
+                            <img src="<?php echo esc_url( $label ); ?>" alt="<?php echo esc_attr( $value ); ?>" title="<?php echo esc_attr( $value ); ?>">
                         </label>
                     </input>
                 <?php endforeach; ?>
             </div>
-            <script>jQuery(document).ready(function($) { $( '[id="input_<?php echo $this->id; ?>"]' ).buttonset(); });</script>
+            <script>jQuery(document).ready(function($) { $( '[id="input_<?php echo esc_js( $this->id ); ?>"]' ).buttonset(); });</script>
             <?php
         }

blogus/3.2.1/inc/ansar/global/schema-markup/schema-markup.php

@@ -54 +54 @@
 
     echo '<script type="application/ld+json">' .
-         wp_json_encode( $schema, JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE ) .
-         '</script>';
+        wp_json_encode( $schema, JSON_HEX_TAG | JSON_HEX_AMP | JSON_HEX_APOS | JSON_HEX_QUOT | JSON_UNESCAPED_UNICODE ) .
+        '</script>';
 }
 add_action( 'wp_head', 'blogus_add_post_schema' );

blogus/3.2.1/inc/ansar/hooks/hook-index-main.php

@@ -158 +158 @@
             $authorDesc = get_the_author_meta('description');
             if (!empty($authorDesc)) {
-                echo '<p class="bs-author-desc">' . $authorDesc . '</p>';
+                echo '<p class="bs-author-desc">' . wp_kses_post( $authorDesc ) . '</p>';
             }
             ?>

blogus/3.2.1/inc/ansar/widgets/widget-author-info.php

@@ -1 @@
-<?php add_action('admin_enqueue_scripts', 'blogus_author_widget_scripts');
+<?php 
+add_action('admin_enqueue_scripts', 'blogus_author_widget_scripts');
 
 function blogus_author_widget_scripts() {    
@@ -42 +43 @@
         endif;
         if (!empty($instance['title'])){
-            echo $args['before_title'] . $instance['title'] . $args['after_title']; 
+            echo $args['before_title'] . esc_html( apply_filters( 'widget_title', $instance['title'] ) ) . $args['after_title'];
         } ?>      
         <div class="bs-author text-center">
             <?php if( !empty($instance['image_uri']) ){ ?> 
-                <img class="rounded-circle" src="<?php echo esc_url($instance['image_uri']); ?>" alt="<?php echo apply_filters('widget_title', $instance['name']); ?>" />
+                <img class="rounded-circle" src="<?php echo esc_url($instance['image_uri']); ?>" alt="<?php echo esc_attr( apply_filters('widget_title', $instance['name']) ); ?>" />
             <?php } ?>
             <h4><?php echo esc_html($instance['name']); ?></h4>
@@ -128 +129 @@
             <?php
             if ( !empty($instance['image_uri']) ) :
-                echo '<img class="custom_media_image_team" src="' . $instance['image_uri'] . '" style="margin:0;padding:0;max-width:100px;float:left;display:inline-block" alt="'.__( 'Uploaded image', 'blogus' ).'" /><br />';
+                echo '<img class="custom_media_image_team" src="' . esc_url( $instance['image_uri'] ) . '" style="margin:0;padding:0;max-width:100px;float:left;display:inline-block" alt="'. esc_attr__( 'Uploaded image', 'blogus' ).'" /><br />';
             endif;
             ?>
-            <input type="text" class="widefat custom_media_url_team" name="<?php echo esc_attr($this->get_field_name('image_uri')); ?>" id="<?php echo esc_attr($this->get_field_id('image_uri')); ?>" value="<?php if( !empty($instance['image_uri']) ): echo $instance['image_uri']; endif; ?>" style="margin-top:5px;">
+            <input type="text" class="widefat custom_media_url_team" name="<?php echo esc_attr($this->get_field_name('image_uri')); ?>" id="<?php echo esc_attr($this->get_field_id('image_uri')); ?>" value="<?php if( !empty($instance['image_uri']) ): echo esc_url( $instance['image_uri'] ); endif; ?>" style="margin-top:5px;">
             <input type="button" class="button button-primary custom_media_button_team" id="custom_media_button_team" name="<?php echo esc_attr($this->get_field_name('image_uri')); ?>" value="<?php esc_attr_e('Upload Image','blogus'); ?>" style="margin-top:5px;">
         </p>

blogus/3.2.1/inc/ansar/widgets/widget-featured-post-widget.php

@@ -57 +57 @@
                                                         </div>
                                                         <div class="inner py-4 px-4">
-                                                <h4 class="title"><a title="<?php echo get_the_title( $postID ); ?>" href="<?php echo get_permalink($postID); ?>"><?php echo get_the_title( $postID ); ?></a></h4>
+                                                                <h4 class="title"><a title="<?php echo esc_attr( get_the_title( $postID ) ); ?>" href="<?php echo esc_url( get_permalink( $postID ) ); ?>"><?php echo esc_html( get_the_title( $postID ) ); ?></a></h4>
                                                                 <div class="bs-blog-meta mb-0">
                                                                         <?php blogus_date_content(); ?>
@@ -68 +68 @@
                                                         <div class="small-post-content">
                                                                 <!-- small-post-content -->
-                                                                <h5 class="title"><a title="<?php echo get_the_title( $postID ); ?>" href="<?php echo get_permalink($postID); ?>"><?php echo get_the_title( $postID ); ?></a></h5>
+                                                                <h5 class="title"><a title="<?php echo esc_attr( get_the_title( $postID ) ); ?>" href="<?php echo esc_url( get_permalink( $postID ) ); ?>"><?php echo esc_html( get_the_title( $postID ) ); ?></a></h5>
                                                                 <!-- // title_small_post -->
                                                                 <div class="bs-blog-meta">

blogus/3.2.1/inc/ansar/widgets/widget-recent-post.php

@@ -26 +26 @@
                 if($instance['title'])
         
-                echo $args['before_title'] . $instance['title'] . $args['after_title'];
+                echo $args['before_title'] . esc_html( apply_filters( 'widget_title', $instance['title'] ) ) . $args['after_title'];
                  
                 $loop = new WP_Query(array( 'post_type' => 'post','ignore_sticky_posts' => 1, 'showposts' => $instance['number_of_posts'] )); ?>
@@ -94 +94 @@
                 
                 $instance = array();
-                $instance['title'] = ( ! empty( $new_instance['title'] ) ) ? $new_instance['title'] : '';
+                $instance['title'] = ( ! empty( $new_instance['title'] ) ) ? sanitize_text_field( $new_instance['title'] ) : '';
                 $instance['number_of_posts'] = ( ! empty( $new_instance['number_of_posts'] ) ) ? strip_tags( $new_instance['number_of_posts'] ) : '';
                 

blogus/3.2.1/readme.txt

@@ -5 +5 @@
 Requires at least: 6.0
 Tested up to: 7.1
-Stable tag: 3.2.0
-Version: 3.2.0
+Stable tag: 3.2.1
+Version: 3.2.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -814 +814 @@
 * Remove Unnecessary CSS for customizer.
 * Fixed Featured Post issue.
+
+= Version 3.2.1
+* Fixed identified security vulnerabilities.
+* Improved input validation and output escaping.

blogus/3.2.1/style-rtl.css

@@ -5 +5 @@
 Author URI: https://themeansar.com
 Description: Blogus is a fast, clean, modern-looking Best Responsive News Magazine WordPress theme. The theme is fully widgetized, so users can manage the content by using easy to use widgets. Blogus is suitable for dynamic news, newspapers, magazine, publishers, blogs, editors, online and gaming magazines, newsportals,personal blogs, newspaper, publishing or review siteand any creative website. Blogus is SEO friendly, WPML,Gutenberg, translation and RTL ready. Live preview : https://demos.themeansar.com/blogus-demos/ and documentation at https://docs.themeansar.com/docs/blogus/
-Version: 3.2.0
+Version: 3.2.1
 Tested up to: 7.1
 Requires PHP: 7.4

blogus/3.2.1/style.css

@@ -5 +5 @@
 Author URI: https://themeansar.com
 Description: Blogus is a fast, clean, modern-looking Best Responsive News Magazine WordPress theme. The theme is fully widgetized, so users can manage the content by using easy to use widgets. Blogus is suitable for dynamic news, newspapers, magazine, publishers, blogs, editors, online and gaming magazines, newsportals,personal blogs, newspaper, publishing or review siteand any creative website. Blogus is SEO friendly, WPML,Gutenberg, translation and RTL ready. Live preview : https://demos.themeansar.com/blogus-demos/ and documentation at https://docs.themeansar.com/docs/blogus/
-Version: 3.2.0
+Version: 3.2.1
 Tested up to: 7.1
 Requires PHP: 7.4