Fix Unescaped Title Attributes in plugin Custom Post Types Relationships (CPTR)

attr_fix_cptr.php.diff

diff --git a/wp-content/plugins/custom-post-types-relationships-cptr/cptr.php b/wp-content/plugins/custom-post-types-relationships-cptr/cptr.php
index 2d82e17..853a51d 100644
--- a/wp-content/plugins/custom-post-types-relationships-cptr/cptr.php
+++ b/wp-content/plugins/custom-post-types-relationships-cptr/cptr.php
@@ -136,7 +136,7 @@ function cptr_category_selector() {
 			if (!empty($relations)) :
 				foreach($relations as $relation) :
 					$post = get_post($relation);
-					echo "<div title='" . $post->post_title . "' class='thepost' id='post-".$post->ID ."'>
+					echo "<div title='" . esc_attr($post->post_title) . "' class='thepost' id='post-".$post->ID ."'>
 							<a href='#' class='removeme'>Remove</a>
 							<p><strong>" . $post->post_title . "</strong></p>
 							<input type='hidden' name='reladded[]' value='" . $post->ID . "' />
@@ -174,7 +174,7 @@ function cptr_cats() {
 		if (!empty($posts)) {
 			foreach ( $posts as $post ) {
 				setup_postdata($post);
-				echo "<div title='" . $post->post_title . "' class='thepost' id='post-".$post->ID ."'>
+				echo "<div title='" . esc_attr($post->post_title) . "' class='thepost' id='post-".$post->ID ."'>
 					<a href='#' class='addme'>Add</a>
 					<p><strong>" . $post->post_title . "</strong></p>
 					<input type='hidden' name='related[]' value='" . $post->ID . "' />