diff --git a/includes/core/class-shortcodes.php b/includes/core/class-shortcodes.php index 4f04b5fb..89ff081e 100644 --- a/includes/core/class-shortcodes.php +++ b/includes/core/class-shortcodes.php @@ -420,7 +420,27 @@ if ( ! class_exists( 'um\core\Shortcodes' ) ) { return UM()->get_template( 'login-to-view.php', '', $args ); } - return apply_shortcodes( $this->convert_locker_tags( wpautop( $content ) ) ); + $prepared_content = wp_kses( apply_shortcodes( $this->convert_locker_tags( wpautop( $content ) ) ), UM()->get_allowed_html( 'templates' ) ); + + /** + * Filters prepared inner content via Ultimate Member handlers in [um_loggedin] shortcode. + * + * @since 2.8.7 + * @hook um_loggedin_inner_content + * + * @param {string} $prepared_content Prepared inner content via Ultimate Member handlers. + * @param {string} $content Original inner content. + * + * @return {string} Prepared inner content. + * + * @example