Merge pull request #114 from brainstormforce/next-release

Final PR version 1.5.8 to Next release
brainstormforce · Mar 21, 2024 · 006603f · 006603f
2 parents 5c96e8f + 0cedf4b
commit 006603f
Show file tree

Hide file tree

Showing 9 changed files with 17 additions and 15 deletions.
diff --git a/README.md b/README.md
@@ -3,8 +3,8 @@
 **Donate link:** https://www.paypal.me/BrainstormForce  
 **Tags:** beaver builder, beaver builder free, beaver addons, beaver builder addon, beaver builder add ons, beaver builder lite, beaver builder modules, beaver builder addons, beaver builder extensions, beaver addon, beaver builder plugin, beaver builder wordpress  
 **Requires at least:** 4.6  
-**Tested up to:** 6.4.1  
-**Stable tag:** 1.5.7  
+**Tested up to:** 6.5  
+**Stable tag:** 1.5.8  
 **License:** GPLv2 or later  
 **License URI:** https://www.gnu.org/licenses/gpl-2.0.html  
 
@@ -215,7 +215,8 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in
 
 ## Changelog ##
 
-### 1.5.7.1 ###
+### 1.5.8 ###
+* Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team.
 * Fixed: Info List - Undefined variable issue with PHP 8.
 
 ### 1.5.7 ###

diff --git a/bb-ultimate-addon.php b/bb-ultimate-addon.php
@@ -3,7 +3,7 @@
  * Plugin Name: Ultimate Addons for Beaver Builder - Lite
  * Plugin URI: http://www.ultimatebeaver.com/
  * Description: Ultimate Addons is a free extension for Beaver Builder that adds 10 modules, and works on top of any Beaver Builder Package. (Free, Standard, Pro & Agency) You can use it with on any WordPress theme.
- * Version: 1.5.7
+ * Version: 1.5.8
  * Author: Brainstorm Force
  * Author URI: http://www.brainstormforce.com
  * Text Domain: uabb
@@ -18,7 +18,7 @@
 
 	define( 'BB_ULTIMATE_ADDON_DIR', plugin_dir_path( __FILE__ ) );
 	define( 'BB_ULTIMATE_ADDON_URL', plugins_url( '/', __FILE__ ) );
-	define( 'BB_ULTIMATE_ADDON_LITE_VERSION', '1.5.7' );
+	define( 'BB_ULTIMATE_ADDON_LITE_VERSION', '1.5.8' );
 	define( 'BSF_REMOVE_UABB_FROM_REGISTRATION_LISTING', true );
 	define( 'BB_ULTIMATE_ADDON_FILE', trailingslashit( dirname( __FILE__ ) ) . 'bb-ultimate-addon.php' );// @codingStandardsIgnoreLine.
 	define( 'BB_ULTIMATE_ADDON_LITE', true );

diff --git a/modules/advanced-icon/includes/frontend.php b/modules/advanced-icon/includes/frontend.php
@@ -19,7 +19,7 @@
 	if ( ! empty( $icon->connections->link ) && empty( $icon->link ) && ! FLBuilderModel::is_builder_active() ) {
 		echo '';
 	} else {
-		echo '<a class="adv-icon-link adv-icon-' . esc_attr( $icon_count ) . '" href="' . $icon->link . '" target="' . esc_attr( $icon->link_target ) . '" ' . sanitize_text_field( BB_Ultimate_Addon_Helper::get_link_rel( $icon->link_target, $icon->link_nofollow, 0 ) ) . '>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+		echo '<a class="adv-icon-link adv-icon-' . esc_attr( $icon_count ) . '" href="' . esc_url( $icon->link ) . '" target="' . esc_attr( $icon->link_target ) . '" ' . sanitize_text_field( BB_Ultimate_Addon_Helper::get_link_rel( $icon->link_target, $icon->link_nofollow, 0 ) ) . '>'; //phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
 		$imageicon_array = array(
 
 			/* General Section */

diff --git a/modules/flip-box/includes/frontend.php b/modules/flip-box/includes/frontend.php
@@ -33,7 +33,7 @@
 					<?php
 					if ( '' != $settings->title_back ) {
 						?>
-					<<?php echo $settings->back_title_typography_tag_selection; ?> class="uabb-back-text-title"><?php echo $settings->title_back; ?></<?php echo $settings->back_title_typography_tag_selection; ?>>
+					<<?php echo esc_attr( $settings->back_title_typography_tag_selection ); ?> class="uabb-back-text-title"><?php echo esc_attr( $settings->title_back ); ?></<?php echo esc_attr( $settings->back_title_typography_tag_selection ); ?>>
 						<?php
 					}
 					if ( '' != $settings->desc_back ) {

diff --git a/modules/image-separator/includes/frontend.php b/modules/image-separator/includes/frontend.php
@@ -11,7 +11,7 @@
 ?>
 <div class="uabb-module-content uabb-imgseparator-wrap">
 	<?php if ( 'yes' == $settings->enable_link ) : ?>
-	<a class="imgseparator-link" href="<?php echo $settings->link; ?>" target="<?php echo $settings->link_target; ?>"></a>
+	<a class="imgseparator-link" href="<?php echo esc_url( $settings->link ); ?>" target="<?php echo esc_attr( $settings->link_target ); ?>"></a>
 	<?php endif; ?>
 	<div class="uabb-image-separator uabb-image
 	<?php

diff --git a/modules/info-table/includes/frontend.php b/modules/info-table/includes/frontend.php
@@ -26,7 +26,7 @@
 			<?php echo '</' . $settings->sub_heading_tag_selection . '>'; ?>
 			<?php if ( 'cta' == $settings->it_link_type && 'design02' == $settings->box_design ) { ?>
 			<div class="info-table-button">
-				<a href="<?php echo $settings->it_link; ?>" target="<?php echo $settings->it_link_target; ?>" <?php UABB_Helper::get_link_rel( $settings->it_link_target, $link_nofollow, 1 ); ?>><?php echo $settings->button_text; ?></a>
+				<a href="<?php echo esc_url( $settings->it_link ); ?>" target="<?php echo esc_attr( $settings->it_link_target ); ?>" <?php UABB_Helper::get_link_rel( esc_attr( $settings->it_link_target ), $link_nofollow, 1 ); ?>><?php echo esc_html( $settings->button_text ); ?></a>
 			</div>
 			<?php } ?>	
 		</div>
@@ -73,7 +73,7 @@
 		</div>
 		<?php if ( 'cta' == $settings->it_link_type && 'design02' != $settings->box_design ) { ?>
 		<div class="info-table-button">
-			<a href="<?php echo $settings->it_link; ?>" target="<?php echo $settings->it_link_target; ?>"><?php echo $settings->button_text; ?></a>
+			<a href="<?php echo esc_url( $settings->it_link ); ?>" target="<?php echo esc_attr( $settings->it_link_target ); ?>"><?php echo esc_html( $settings->button_text ); ?></a>
 		</div>
 		<?php } ?>
 	</div>

diff --git a/modules/uabb-button/includes/frontend.php b/modules/uabb-button/includes/frontend.php
@@ -22,7 +22,7 @@
 		<?php
 	}
 	?>
-		<a href="<?php echo $settings->link; ?>" target="<?php echo $settings->link_target; ?>" <?php UABB_Helper::get_link_rel( $settings->link_target, $link_nofollow, 1 ); ?>class="uabb-button uabb-creative-button <?php echo 'uabb-creative-' . $settings->style . '-btn'; ?> <?php echo $module->get_button_style(); ?> <?php echo ( isset( $settings->a_class ) ) ? $settings->a_class : ''; ?> " <?php echo ( isset( $settings->a_data ) ) ? $settings->a_data : ''; ?> role="button">
+		<a href="<?php echo esc_url( $settings->link ); ?>" target="<?php echo esc_attr( $settings->link_target ); ?>" <?php UABB_Helper::get_link_rel( esc_attr( $settings->link_target ), $link_nofollow, 1 ); ?>class="uabb-button uabb-creative-button <?php echo 'uabb-creative-' . esc_attr( $settings->style ) . '-btn'; ?> <?php echo esc_attr( $module->get_button_style() ); ?> <?php echo ( isset( $settings->a_class ) ) ? esc_attr( $settings->a_class ) : ''; ?> " <?php echo ( isset( $settings->a_data ) ) ? esc_attr( $settings->a_data ) : ''; ?> role="button">
 			<?php
 			if ( ! empty( $settings->icon ) && ( 'before' == $settings->icon_position || ! isset( $settings->icon_position ) ) ) :
 

diff --git a/modules/uabb-heading/includes/frontend.php b/modules/uabb-heading/includes/frontend.php
@@ -35,7 +35,7 @@
 
 	<<?php echo $settings->tag; ?> class="uabb-heading">
 		<?php if ( ! empty( $settings->link ) ) : ?>
-			<a href="<?php echo $settings->link; ?>" title="<?php echo $settings->heading; ?>" target="<?php echo $settings->link_target; ?>" <?php BB_Ultimate_Addon_Helper::get_link_rel( $settings->link_target, $settings->link_nofollow, 1 ); ?>>
+			<a href="<?php echo esc_url( $settings->link ); ?>" title="<?php echo esc_attr( $settings->heading ); ?>" target="<?php echo esc_attr( $settings->link_target ); ?>" <?php BB_Ultimate_Addon_Helper::get_link_rel( esc_attr( $settings->link_target ), $settings->link_nofollow, 1 ); ?>>
 			<?php endif; ?>
 			<span class="uabb-heading-text"><?php echo $settings->heading; ?></span>
 			<?php if ( ! empty( $settings->link ) ) : ?>

diff --git a/readme.txt b/readme.txt
@@ -3,8 +3,8 @@ Contributors: brainstormforce
 Donate link: https://www.paypal.me/BrainstormForce
 Tags: beaver builder, beaver builder free, beaver addons, beaver builder addon, beaver builder add ons, beaver builder lite, beaver builder modules, beaver builder addons, beaver builder extensions, beaver addon, beaver builder plugin, beaver builder wordpress
 Requires at least: 4.6
-Tested up to: 6.4.1
-Stable tag: 1.5.7
+Tested up to: 6.5
+Stable tag: 1.5.8
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -215,7 +215,8 @@ Yes it is! This plugin comes with .po and .mo files. It is already translated in
 
 == Changelog ==
 
-= 1.5.7.1 = 
+= 1.5.8 = 
+* Improvement: This update addressed a security bug. Props to Patchstack for privately reporting it to our team.
 * Fixed: Info List - Undefined variable issue with PHP 8.
 
 = 1.5.7 =