escape_attr on title attribute

mkessel007 · Oct 26, 2016 · 8d4a20a · 8d4a20a
1 parent bd67cbd
commit 8d4a20a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/CMB2.php b/includes/CMB2.php
@@ -425,7 +425,7 @@ public function render_group_row( $field_group, $remove_disabled ) {
 		<div class="postbox cmb-row cmb-repeatable-grouping', $closed_class, '" data-iterator="', $field_group->index, '">';
 
 			if ( $field_group->args( 'repeatable' ) ) {
-				echo '<button type="button" ', $remove_disabled, 'data-selector="', $field_group->id(), '_repeat" class="dashicons-before dashicons-no-alt cmb-remove-group-row" title="', $field_group->options( 'remove_button' ), '"></button>';
+				echo '<button type="button" ', $remove_disabled, 'data-selector="', $field_group->id(), '_repeat" class="dashicons-before dashicons-no-alt cmb-remove-group-row" title="', esc_attr( $field_group->options( 'remove_button' ) ), '"></button>';
 			}
 
 			echo '