WPCasa 1.3.1

README.md

@@ -37,25 +37,12 @@ For help and documentation please feel free to visit our [support center](https:
 
 ## Translations
 
-* German (de_DE): [Simon Rimkus](http://wpcasa.com)
-* Spanish (es_ES): [Simon Rimkus](http://wpcasa.com)
-* French (fr_FR): [Guido Sommer](https://aiximmo.ch/)
-* Portuguese (pt_BR): [Walter Barcelos](http://walterbarcelos.com), [Leonardo Lima de Vasconcellos](https://www.devhouse.com.br/)		
-* Italian (it_IT): [Laura Vanoni](www.simboliweb.it), [Nicola Turato](https://www.linkedin.com/in/nicolaturato), [Andrea Manzato]		
-* Dutch (nl_NL): [Dennis Onstenk](http://citymakelaardij.nl)		
-* Croatian (hr_HR): [Danijel Cukarić](http://pistacio.hr)		
-* Russian (ru_RU): [Systemo](http://systemo.biz)		
-* Romanian (ro_RO): [Adrian Mocanu](http://www.bitopia.ro)		
-* Slovak (sk_SK): [Jana Mičeková](https://www.jmsupport.sk)
-* Farsi (fa_IR): Kim
-
-POT file with text strings is included. If you would like to add a translation and see your name here, please [get in touch](https://wpcasa.com/contact/).
+Since version 1.3.0 the translations are handled on WordPress.org. Please be part of the community and help to translate WPCasa on [GlotPress](https://translate.wordpress.org/projects/wp-plugins/wpcasa/). Thank you!
 
 ## Contribution
 
 You are warmly welcome to contribute to WPCasa. No matter if you find a typo or a bug, if you want to suggest a cool new feature or if you want to help us to translate WPCasa... we would like to hear you. Here's how you could get started.
 
 1. [Report](https://github.com/wpsight/wpcasa/issues) a minor issue or a major bug
 2. [Provide feedback](https://github.com/wpsight/wpcasa/issues?direction=desc&labels=Enhancement&page=1&sort=created&state=open) on enhancements
-3. [Submit](https://wpcasa.com/contact) a translation of your language
-4. Send pull requests with fixes and improvments
+3. Send pull requests with fixes and improvements

README.txt

@@ -2,10 +2,11 @@
 Contributors: wpsight, kybernetikservices, mrinal013
 Plugin URI: https://wordpress.org/plugins/wpcasa/
 Donate link: https://www.paypal.com/donate/?hosted_button_id=SYJNVSP2BKTQ4
-Tags: realtor, wpcasa, real estate, realestate, listings
+Tags: listings, property, real-estate, rental, realtor
 Requires at least: 6.2
+Requires PHP: 7.2
 Tested up to: 6.7
-Stable tag: 1.3.0
+Stable tag: 1.3.1
 License: GPLv2 or later
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -53,7 +54,7 @@ You can manage great numbers of listings using the well-organized property list
 
 Select the location of your properties through the map in the editor, display the location of each property on a single listing map, or showcase all of your listings on the overall listings map.
 
-= Intuitive Options =		
+= Intuitive Options =
 Setup date format, measurement units, listing details and much more via the intuitive and easy-to-understand admin interface
 
 = Developer Friendly =
@@ -202,20 +203,20 @@ If you find WPCasa an interesting project, please feel free to have a look at ou
 7. Property Management
 
 == Contributors ==
-This is a list of contributors to WPCasa.		
-Many thanks to all of them for contributing and making WPCasa even better.	
+This is a list of contributors to WPCasa.
+Many thanks to all of them for contributing and making WPCasa even better.
 
 [Mrinal Haque](https://profiles.wordpress.org/mrinal013/)
 [Kybernetik Services](https://www.kybernetik-services.com/?utm_source=wordpress_org&utm_medium=plugin&utm_campaign=wpcasa&utm_content=readme)
 [Joe Hana](https://wordpress.org/support/users/joehana/)
 [Fabian Marz](https://github.com/fabianmarz)
 [codestylist](https://wordpress.org/support/users/codestylist/)
-[Luiz Bills](https://github.com/luizbills)		
+[Luiz Bills](https://github.com/luizbills)
 [Walter Barcelos](https://walterbarcelos.com)
-[Leonardo Lima de Vasconcellos](https://www.devhouse.com.br/)		
-[Laura Vanoni](www.simboliweb.it)		
-[Nicola Turato](https://www.linkedin.com/in/nicolaturato)		
-[Andrea Manzato]		
+[Leonardo Lima de Vasconcellos](https://www.devhouse.com.br/)
+[Laura Vanoni](www.simboliweb.it)
+[Nicola Turato](https://www.linkedin.com/in/nicolaturato)
+Andrea Manzato
 [Danijel Cukarić](https://pistacio.hr)
 [Dennis Onstenk](https://citymakelaardij.nl)
 [Systemo](https://systemo.biz)
@@ -224,6 +225,11 @@ Many thanks to all of them for contributing and making WPCasa even better.
 [Simon Rimkus](https://github.com/simonrimkus)
 
 == Changelog ==
+= 1.3.1 =
+* TWEAK: added string translation of listing details
+* UPDATE: CMB2 updated to 2.11.0
+* FIX: Fixed authenticated stored XSS (Thanks to Vlad Nikandrov)
+
 = 1.3.0 =
 * NEW: Added input field for longitude and latitude to manually set the location of the listing
 * NEW: Switch to using language files from [GlotPress](https://translate.wordpress.org/projects/wp-plugins/wpcasa/).

includes/admin/class-wpsight-admin-page-about.php

@@ -110,14 +110,28 @@ public function output() {
                             </style>
 
                             <ul class="tabs" data-tabgroup="first-tab-group">
-                                <li class="tab"><a href="#version-1-3-0" class="active">v1.3.0</a></li>
+                                <li class="tab"><a href="#version-1-3-1" class="active">v1.3.1</a></li>
+                                <li class="tab"><a href="#version-1-3-0" >v1.3.0</a></li>
                                 <li class="tab"><a href="#version-1-2-13">v1.2.13</a></li>
                                 <li class="tab"><a href="#version-1-2-12">v1.2.12</a></li>
                                 <li class="tab"><a href="#version-1-2-11">v1.2.11</a></li>
                                 <li><a href="https://wpcasa.com" target="_blank"><?php echo esc_html__( 'More', 'wpcasa' ); ?></a></li>
                             </ul>
 
                             <section id="first-tab-group" class="tabgroup">
+                                <div id="version-1-3-1">
+                                    <p>Version: 1.3.1</p>
+                                    <table>
+                                        <tr>
+                                            <td><span class="changelog-entry-tweak">Tweak</span></td>
+                                            <td>Added string translation of listing details</a></td>
+                                            <td><span class="changelog-entry-update">Update</span></td>
+                                            <td>CMB2 updated to 2.11.0</a></td>
+                                            <td><span class="changelog-entry-fix">Fix</span></td>
+                                            <td>Fixed authenticated stored XSS</a></td>
+                                        </tr>
+                                    </table>
+                                </div>
 
                                 <div id="version-1-3-0">
                                     <p>Version: 1.3.0</p>

includes/class-wpsight-post-types.php

@@ -52,8 +52,12 @@ public function __construct() {
 		add_action( 'wpsight_head_print', array( $this, 'wpsight_head_print_css' ) );
 		add_filter( 'wpsight_head_print', array( $this, 'wpsight_head_print_robots' ) );
 
+        // Sanitize CPT
+
+		add_filter( 'wp_insert_post_data', array( $this, 'wpsight_sanitize_post_title' ), 10, 2 );
+
 	}
-	
+
 	/**
 	 * register_post_type_listing()
 	 *
@@ -137,7 +141,7 @@ public function register_post_type_listing() {
 	        'add_new_item' 		 		 => _x( 'Add New Listing Type', 'taxonomy types', 'wpcasa' ),
 	        'new_item_name' 	 		 => _x( 'New Listing Type Name', 'taxonomy types', 'wpcasa' ),
 	        'parent_item'  		 		 => _x( 'Parent Listing Type', 'taxonomy types', 'wpcasa' ),
-	        'parent_item_colon'  		 => _x( 'Parent Listing Type:', 'taxonomy types', 'wpcasa' ),
+	        'parent_item_colon'  		 => _x( 'Parent Listing Type', 'taxonomy types', 'wpcasa' ).':',
 	        'search_items' 		 		 => _x( 'Search listing types', 'taxonomy types', 'wpcasa' ),
 	        'popular_items' 	 		 => _x( 'Popular Listing Types', 'taxonomy types', 'wpcasa' ),
 	        'separate_items_with_commas' => _x( 'Separate listing types with commas', 'taxonomy types', 'wpcasa' ),
@@ -647,4 +651,31 @@ function wpsight_head_print_robots() {	?>
 	<?php
 	}
 
+	/**
+	 * wpsight_sanitize_post_title()
+	 *
+	 * This functions sanitizes the custom post type listing
+	 * title to prevent XSS and script in the title
+	 *
+	 * @access public
+	 * @uses wp_kses()
+	 *
+	 * @since 1.3.1
+	 */
+	public function wpsight_sanitize_post_title( $data, $postarr ) {
+
+		if( 'listing' == $data['post_type'] ) {
+
+			if( ! empty( $data['post_title'] ) ) {
+
+				$data['post_title'] = wp_kses( $data['post_title'], 'post' );
+
+			}
+
+		}
+
+		return $data;
+	}
+
+
 }