Text Not escaped properly

Hey it seems the input type="text" value is not escaped so someone entering 

Hello "World" would get Hello after save.