From a5b2e6a7ef02130e01db6beb3abdb73308f70b42 Mon Sep 17 00:00:00 2001
From: Nikita Sinelnikov <nsinelnikov.work@gmail.com>
Date: Tue, 6 Jul 2021 12:31:09 +0300
Subject: [PATCH] - fixed security issue with email templates content;

---
 includes/admin/core/class-admin-settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/admin/core/class-admin-settings.php b/includes/admin/core/class-admin-settings.php
index 77b31d4a..fa6183c7 100644
--- a/includes/admin/core/class-admin-settings.php
+++ b/includes/admin/core/class-admin-settings.php
@@ -3382,7 +3382,7 @@ Use Only Cookies:         			<?php echo ini_get( 'session.use_only_cookies' ) ?
 			}
 
 			$template = $settings['um_email_template'];
-			$content = stripslashes( $settings[ $template ] );
+			$content = wp_kses_post( stripslashes( $settings[ $template ] ) );
 
 			$theme_template_path = UM()->mail()->get_template_file( 'theme', $template );