diff --git a/app/ExternalFiles/Forms.php b/app/ExternalFiles/Forms.php
index 73896ec..5aab575 100644
--- a/app/ExternalFiles/Forms.php
+++ b/app/ExternalFiles/Forms.php
@@ -312,7 +312,7 @@ public function add_urls_via_ajax(): void {
 		$password = filter_input( INPUT_POST, 'password', FILTER_SANITIZE_FULL_SPECIAL_CHARS );
 
 		// get additional fields.
-		$additional_fields = isset( $_POST['additional_fields'] ) ? array_map( 'sanitize_text_field', $_POST['additional_fields'] ) : array();
+		$additional_fields = isset( $_POST['additional_fields'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_POST['additional_fields'] ) ) : array();
 
 		$false = false;
 		/**