BP Profile as Homepage Fork - Reflected cross-site scripting (XSS)

 118 | function bpahpf_settings_page(){
 119 |
 120 | //check for capability to manage options
 121 | if ( !current_user_can( 'manage_options' ) ){
 122 |
 123 | wp_die( __('You do not have sufficient permissions to access this page.', 'bpahpf-menu' ) );
 124 |
 125 | }
 126 |
 127 | $opt_name = 'bpahpf_role_choice';
 128 | $data_field_name = 'bpahpf_role_choice';
 129 |
 130 | $opt_val = get_option( $opt_name );
 131 |
 132 | //if nonce checks out then save submitted data
 133 | $nonce=$_REQUEST['_wpnonce'];
 134 | if( wp_verify_nonce( $nonce, 'bpahpf' ) )
 135 | {
 136 | $opt_val = $_POST[ $data_field_name ];
 137 | update_option( $opt_name, $opt_val );
 138 | ?>
 139 | <div class=""updated""><p><strong><?php _e( 'Settings saved.', 'bpahpf-menu' ); ?></strong></p></div>
 140 | <?php
 141 |
 142 | }
 143 |
 144 | echo '<div class=""wrap"">';
 145 | echo ""<h2>"" . __( 'BP Profile as Homepage Fork Settings', 'bpahpf-menu' ) . ""</h2>"";
 146 | ?>
 147 | <p>
 148 | <?php _e( 'Disable Profile as Homepage for a particular user role.', 'bpahpf-menu' ); ?>
 149 | </p>
 150 | <form name=""bpahpf-settings-form"" method=""post"" action="""">
 151 | <?php wp_nonce_field( 'bpahpf' ); ?>
 152 | <p><b>
 153 | <?php _e( 'You have selected:', 'bpahpf-menu' ); ?>
 154 | </b>
 155 | <?php
 156 | if ( '' == $opt_val )
 157 | _e( 'No One', 'bpahpf-menu' );
 158 | else
> 159 | echo $opt_val;
 160 | ?>
 161 | <hr />
 162 | <?php _e( 'Disable redirect to Profile for this role :', 'bpahpf-menu' ); ?>
 163 | <select name=""<?php echo $data_field_name; ?>"">
 164 | <option value="""">
 165 | <?php _e( 'No One', 'bpahpf-menu' ); ?>
 166 | </option>
 167 | <?php wp_dropdown_roles( );?>
 168 | </select>
 169 | </p>
 170 | <p class=""submit"">
 171 | <input type=""submit"" name=""Submit"" class=""button-primary"" value=""<?php esc_attr_e( 'Save Changes', 'bpahpf-menu' ) ?>"" />
 172 | </p>
 173 | </form>
 174 | </div>
  175 | <?php
  176 | }
      ^ Col 0