From 724e2d186a33c0c27273107dc4f160a09384877f Mon Sep 17 00:00:00 2001
From: Bozhidar Slaveykov <bobi@microweber.com>
Date: Tue, 3 May 2022 11:41:32 +0300
Subject: [PATCH] Update order_filtering.blade.php

---
 .../views/admin/orders/partials/order_filtering.blade.php       | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/MicroweberPackages/Order/resources/views/admin/orders/partials/order_filtering.blade.php b/src/MicroweberPackages/Order/resources/views/admin/orders/partials/order_filtering.blade.php
index 418a4429a5b..ce243b216bd 100644
--- a/src/MicroweberPackages/Order/resources/views/admin/orders/partials/order_filtering.blade.php
+++ b/src/MicroweberPackages/Order/resources/views/admin/orders/partials/order_filtering.blade.php
@@ -158,7 +158,7 @@ class="btn btn-link btn-sm <?php if (isset($abandoned)): ?>font-weight-bold text
             $(document).ready(function () {
                 var searchOrdersByProduct = new mw.autoComplete({
                     element: "#js-orders-search-by-products",
-                    placeholder: "<?php if ($productKeyword) { echo $productKeyword; } else { _e("Search by products..."); }?>",
+                    placeholder: "<?php if ($productKeyword) { echo xss_clean($productKeyword); } else { _e("Search by products..."); }?>",
                     autoComplete:true,
                     ajaxConfig: {
                         method: 'get',