diff --git a/htdocs/projet/card.php b/htdocs/projet/card.php
index 9dc13ca7c37..c1c59bcd3b7 100644
--- a/htdocs/projet/card.php
+++ b/htdocs/projet/card.php
@@ -971,7 +971,7 @@ if ($action == 'create' && $user->rights->projet->creer)
 
 		$morehtmlref = '<div class="refidno">';
 		// Title
-		$morehtmlref .= $object->title;
+		$morehtmlref .= dol_escape_htmltag($object->title);
 		// Thirdparty
 		$morehtmlref .= '<br>'.$langs->trans('ThirdParty').' : ';
 		if ($object->thirdparty->id > 0)