From dfabb3b9c445b2ca918c9abe1831b28363fa0a56 Mon Sep 17 00:00:00 2001
From: tewariharish <harishwatson@gmail.com>
Date: Wed, 16 Apr 2025 22:59:59 +0530
Subject: [PATCH] Add escaping on active class

---
 src/wp-admin/themes.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/wp-admin/themes.php b/src/wp-admin/themes.php
index 08245a09718e0..b5ef476ebde8f 100644
--- a/src/wp-admin/themes.php
+++ b/src/wp-admin/themes.php
@@ -432,7 +432,7 @@
 		$active_class = ' active';
 	}
 	?>
-<div class="theme<?php echo $active_class; ?>">
+<div class="theme<?php echo esc_attr( $active_class ); ?>">
 	<?php if ( ! empty( $theme['screenshot'][0] ) ) { ?>
 		<div class="theme-screenshot">
 			<img src="<?php echo esc_url( $theme['screenshot'][0] . '?ver=' . $theme['version'] ); ?>" alt="" />