poline

i’ve found the solution. i’ve just add a htmlentities after the line 208
lib/Wpsqt/Shortcode.php

$fieldName = preg_replace('~[^a-z0-9]~i','',$field['name']);
$fieldName = htmlentities ($fieldName);
$fields[$key]['value'] = $_POST["Custom_".$fieldName];