diff --git a/admin/project_editor.php b/admin/project_editor.php
index cc076ca..2b81a7d 100644
--- a/admin/project_editor.php
+++ b/admin/project_editor.php
@@ -167,7 +167,7 @@ if($projectinfo)
  echo "<input type=\"hidden\" name=\"id\" value=\"$projectinfo->id\">\n";
  echo "<input type=\"hidden\" name=\"registration_id\" value=\"$registration_id\">\n";
  echo "<table>\n";
- echo "<tr><td>".i18n("Project Title").": </td><td><input type=\"text\" name=\"title\" size=\"50\" value=\"$projectinfo->title\" />".REQUIREDFIELD;
+ echo "<tr><td>".i18n("Project Title").": </td><td><input type=\"text\" name=\"title\" size=\"50\" value=\"".htmlspecialchars($projectinfo->title)."\" />".REQUIREDFIELD;
  if($config['participant_project_title_charmax'])
  	echo i18n("(Max %1 characters)",array($config['participant_project_title_charmax']));
  echo "</td></tr>\n";
diff --git a/register_participants_project.php b/register_participants_project.php
index c2138d9..085d791 100644
--- a/register_participants_project.php
+++ b/register_participants_project.php
@@ -197,7 +197,7 @@ function countwords()
  echo "<input type=\"hidden\" name=\"action\" value=\"save\">\n";
  echo "<input type=\"hidden\" name=\"id\" value=\"$projectinfo->id\">\n";
  echo "<table>\n";
- echo "<tr><td>".i18n("Project Title").": </td><td><input type=\"text\" name=\"title\" size=\"50\" value=\"$projectinfo->title\" />".REQUIREDFIELD;
+ echo "<tr><td>".i18n("Project Title").": </td><td><input type=\"text\" name=\"title\" size=\"50\" value=\"".htmlspecialchars($projectinfo->title)."\" />".REQUIREDFIELD;
  if($config['participant_project_title_charmax'])
  	echo i18n("(Max %1 characters)",array($config['participant_project_title_charmax']));
  echo "</td></tr>\n";