corypratt

Line 216 in comment-reply-email.php should be changed from esc_attr to esc_html:

$mail_message = esc_html( $this->options[‘mail_message’] );