From b23ddb13cb217bb8a8086c37173b23154ce56746 Mon Sep 17 00:00:00 2001
From: Linkon Miyan <rudlinkon@gmail.com>
Date: Sun, 28 Apr 2024 16:01:56 +0600
Subject: [PATCH] escape style attribute

---
 includes/Elements/Event_Calendar.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/includes/Elements/Event_Calendar.php b/includes/Elements/Event_Calendar.php
index 903c6c86e..9b2f7be90 100644
--- a/includes/Elements/Event_Calendar.php
+++ b/includes/Elements/Event_Calendar.php
@@ -3060,7 +3060,7 @@ public function eaelec_display_table($data, $settings){
 		$item_per_page = $is_paginated && !empty( $settings['eael_ec_item_per_page'] ) ? intval( $settings['eael_ec_item_per_page'] ) : 1;
 
 		?>
-		<table class="eael-event-calendar-table <?php  echo $is_paginated ? 'ea-ec-table-paginated' : '' ?> ea-ec-table-sortable" data-items-per-page="<?php echo esc_attr( $item_per_page ); ?>">
+		<table class="eael-event-calendar-table <?php echo $is_paginated ? 'ea-ec-table-paginated' : ''; ?> ea-ec-table-sortable" data-items-per-page="<?php echo esc_attr( $item_per_page ); ?>">
 			<thead>
 			<tr style="display: table-row;">
 				<?php
@@ -3128,7 +3128,7 @@ public function eaelec_display_table($data, $settings){
 					$row_style .= "color:{$event['textColor']};";
 				}
 
-				$row_style = $row_style !== '' ? "style={$row_style}" : '';
+				$row_style = $row_style !== '' ? "style={" . esc_attr( $row_style ) . "}" : '';
 
 				$item_count ++;
 				echo '<tr ' . $style . ' >';