diff --git a/src/View/Parsers/ShortcodeParser.php b/src/View/Parsers/ShortcodeParser.php index 0a70ea089..e51cdd12e 100644 --- a/src/View/Parsers/ShortcodeParser.php +++ b/src/View/Parsers/ShortcodeParser.php @@ -476,7 +476,7 @@ class ShortcodeParser if ($tags) { $node->nodeValue = $this->replaceTagsWithText( - $node->nodeValue, + htmlspecialchars($node->nodeValue), $tags, function ($idx, $tag) use ($parser, $extra) { return $parser->getShortcodeReplacementText($tag, $extra, false);