diff --git a/wp-admin/menu-header.php b/wp-admin/menu-header.php
index 691aa9547e..ee90d23152 100644
--- a/wp-admin/menu-header.php
+++ b/wp-admin/menu-header.php
@@ -128,8 +128,9 @@ function _wp_menu_output( $menu, $submenu, $submenu_as_parent = true ) {
 			if ( 'none' === $item[6] || 'div' === $item[6] ) {
 				$img = '<br />';
 			} elseif ( 0 === strpos( $item[6], 'data:image/svg+xml;base64,' ) ) {
-				$img       = '<br />';
-				$img_style = ' style="background-image:url(\'' . esc_url( $item[6] ) . '\')"';
+				$img = '<br />';
+				// The value is base64-encoded data, so esc_attr() is used here instead of esc_url().
+				$img_style = ' style="background-image:url(\'' . esc_attr( $item[6] ) . '\')"';
 				$img_class = ' svg';
 			} elseif ( 0 === strpos( $item[6], 'dashicons-' ) ) {
 				$img       = '<br />';
diff --git a/wp-includes/version.php b/wp-includes/version.php
index 60e1a5734a..3b3626eaaf 100644
--- a/wp-includes/version.php
+++ b/wp-includes/version.php
@@ -16,7 +16,7 @@
  *
  * @global string $wp_version
  */
-$wp_version = '6.0-alpha-53091';
+$wp_version = '6.0-alpha-53092';
 
 /**
  * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.