In your theme php files, remember to use escaping functions such as esc_html as a security standard (we want to make sure we are outputting what we think we are outputting).
Go through all your CFS calls in your php and wrap them in escaping functions
In your theme php files, remember to use escaping functions such as esc_html as a security standard (we want to make sure we are outputting what we think we are outputting).
Go through all your CFS calls in your php and wrap them in escaping functions