Properly escape title in rssFeed.tpl

diff --git a/com.woltlab.wcf/templates/rssFeed.tpl b/com.woltlab.wcf/templates/rssFeed.tpl
index 86994a87f55d387496aa2dfb224f74bc299eaeb4..04dc55a78aa70905d8d732821fca477d7c7d7744 100644 (file)
--- a/com.woltlab.wcf/templates/rssFeed.tpl
+++ b/com.woltlab.wcf/templates/rssFeed.tpl
@@ -6,7 +6,7 @@
        xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
 >
        <channel>
-               <title><![CDATA[{if $title}{@$title} - {/if}{@PAGE_TITLE|language|escapeCDATA}]]></title>
+               <title><![CDATA[{if $title}{@$title|escapeCDATA} - {/if}{@PAGE_TITLE|language|escapeCDATA}]]></title>
                <link><![CDATA[{@$baseHref|escapeCDATA}]]></link>
                <description><![CDATA[{@PAGE_DESCRIPTION|escapeCDATA}]]></description>
                <language>{@$__wcf->language->getFixedLanguageCode()}</language>