From 80795b57317feafeb88315f01de6daf884bc26e8 Mon Sep 17 00:00:00 2001
From: Savvas Hadjigeorgiou <savvasha@hotmail.com>
Date: Fri, 5 Nov 2021 13:51:34 +0200
Subject: [PATCH] Escape vars on Importer Main Class

---
 includes/admin/importers/class-sp-importer.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/admin/importers/class-sp-importer.php b/includes/admin/importers/class-sp-importer.php
index 5675b234..e1d12e79 100644
--- a/includes/admin/importers/class-sp-importer.php
+++ b/includes/admin/importers/class-sp-importer.php
@@ -101,7 +101,7 @@ if ( class_exists( 'WP_Importer' ) ) {
 			<select name="sp_columns[]" data-index="<?php echo array_search( $selected, array_keys( $this->columns ) ); ?>">
 				<option value="0">&mdash; <?php _e( 'Disable', 'sportspress' ); ?> &mdash;</option>
 				<?php foreach ( $this->columns as $key => $label ): ?>
-					<option value="<?php echo $key; ?>" <?php selected( $selected, $key ); ?>><?php echo $label; ?></option>
+					<option value="<?php echo esc_attr( $key ); ?>" <?php selected( $selected, $key ); ?>><?php echo esc_attr( $label ); ?></option>
 				<?php endforeach; ?>
 			</select>
 			<?php