diff --git a/htdocs/projet/card.php b/htdocs/projet/card.php
index dd18a115ab6..e2632fe244e 100644
--- a/htdocs/projet/card.php
+++ b/htdocs/projet/card.php
@@ -765,7 +765,7 @@ elseif ($object->id > 0)
 
 		// Label
 		print '<tr><td class="fieldrequired">'.$langs->trans("Label").'</td>';
-		print '<td><input class="quatrevingtpercent" name="title" value="'.$object->title.'"></td></tr>';
+		print '<td><input class="quatrevingtpercent" name="title" value="'.dol_escape_htmltag($object->title).'"></td></tr>';
 
 		// Status
 		print '<tr><td class="fieldrequired">'.$langs->trans("Status").'</td><td>';