Ticket #7559: patch.diff

taxonomy.php

@@ -127 +127 @@
         else
                 $update = false;
 
-        $name = $cat_name;
+        $name = $cat_name = wp_specialchars($cat_name);
         $description = $category_description;
         $slug = $category_nicename;
         $parent = $category_parent;