All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found 'wpautop'. #2
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
WordPress.Security.EscapeOutput.OutputNotEscaped
FILE: includes/woo-out-of-office-functions.php
wpautop is used 3 times in includes/woo-out-of-office-functions.php