Escape output of colorpicker values

wintercms · Dec 11, 2023 · 517f65d · 517f65d
1 parent 78af271
commit 517f65d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/backend/formwidgets/colorpicker/partials/_colorpicker.php b/modules/backend/formwidgets/colorpicker/partials/_colorpicker.php
@@ -31,14 +31,14 @@ class="
                 data-color-value
                 class="form-control"
             >
-                <?= $value ?>
+                <?= e($value); ?>
             </span>
         <?php else: ?>
             <input
                 data-color-value
                 class="form-control"
                 placeholder="No color"
-                value="<?= $value ?>"
+                value="<?= e($value); ?>"
                 <?php if ($disabled): ?>
                     disabled
                 <?php endif ?>