diff --git a/web/ajax/modals/logout.php b/web/ajax/modals/logout.php
index e9066795d..f9479a34c 100644
--- a/web/ajax/modals/logout.php
+++ b/web/ajax/modals/logout.php
@@ -29,7 +29,7 @@ global $CLANG;
         </button>
       </div>
       <div class="modal-body">
-        <p><?php echo sprintf( $CLANG['CurrentLogin'], $user['Username'] ) ?></p>
+        <p><?php echo sprintf( $CLANG['CurrentLogin'], validHtmlStr($user['Username']) ) ?></p>
 <?php if ( canView('System') ) { ?>
         <p>Other logged in users:<br/>
 <table class="table table-striped">