diff --git a/wp-admin/async-upload.php b/wp-admin/async-upload.php
index 551f854b5a..a146f6a48a 100644
--- a/wp-admin/async-upload.php
+++ b/wp-admin/async-upload.php
@@ -74,7 +74,9 @@ if ( isset( $_REQUEST['attachment_id'] ) && (int) $_REQUEST['attachment_id'] &&
 							}
 							?>
 							<span class="media-item-copy-container copy-to-clipboard-container edit-attachment">
-								<button type="button" class="button button-small copy-attachment-url" data-clipboard-text="<?php echo $file_url; ?>"><?php _e( 'Copy URL to clipboard' ); ?></button>
+								<button type="button" class="button button-small copy-attachment-url"
+									data-clipboard-text="<?php echo esc_url( $file_url ); ?>"
+								><?php _e( 'Copy URL to clipboard' ); ?></button>
 								<span class="success hidden" aria-hidden="true"><?php _e( 'Copied!' ); ?></span>
 							</span>
 						</div>
diff --git a/wp-includes/version.php b/wp-includes/version.php
index ee9965b163..3cb0e7cf56 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '6.8-alpha-59406';
+$wp_version = '6.8-alpha-59407';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.