t

go-form-plugin/go-form-plugin.php

@@ -155,6 +155,7 @@ add_action('admin_post_nopriv_go_form_submit', 'go_form_handle_submission');
 
 // ========== Shortcode ==========
 function go_form_shortcode($atts) {
+    global $ranks;
     $form_id = intval(shortcode_atts(['id' => 1], $atts)['id']);
 
     $msg = '';

go-form-plugin/templates/form-shortcode.php

@@ -60,9 +60,8 @@
             <select name="rank" id="rank">
             
             <?php 
-                global $ranks;
                 foreach ($ranks as $value => $label) {
-                    echo "<option value='{$value}'>{$label}</option>\n";
+                    echo "<option value='" . esc_attr($value) . "'>" . esc_html($label) . "</option>\n";
                 }
             ?>
             </select>