From 75fd238e142d9e4933d3c96d3d8da4a73a38a853 Mon Sep 17 00:00:00 2001
From: Savvas Hadjigeorgiou <savvasha@hotmail.com>
Date: Fri, 5 Nov 2021 13:21:30 +0200
Subject: [PATCH] Escape output vars at Admin Permalink Settings

---
 includes/admin/class-sp-admin-permalink-settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/admin/class-sp-admin-permalink-settings.php b/includes/admin/class-sp-admin-permalink-settings.php
index cd52caee..c5f08ce6 100644
--- a/includes/admin/class-sp-admin-permalink-settings.php
+++ b/includes/admin/class-sp-admin-permalink-settings.php
@@ -65,7 +65,7 @@ class SP_Admin_Permalink_Settings {
 		$slug = array_shift( $this->slugs );
 		$key = $slug[0];
 		$text = get_option( 'sportspress_' . $key . '_slug', null );
-		?><fieldset><input id="sportspress_<?php echo $key; ?>_slug" name="sportspress_<?php echo $key; ?>_slug" type="text" class="regular-text code" value="<?php echo $text; ?>" placeholder="<?php echo $key; ?>"></fieldset><?php
+		?><fieldset><input id="sportspress_<?php echo esc_attr( $key ); ?>_slug" name="sportspress_<?php echo esc_attr( $key ); ?>_slug" type="text" class="regular-text code" value="<?php echo esc_attr( $text ); ?>" placeholder="<?php echo esc_attr( $key ); ?>"></fieldset><?php
 	}
 
 	/**