zhhealthcare/openemr — comment on commit c388df0b3f6a827da5b5052d303b488a8903d35c
File: interface/forms_admin/addlistPopup.php line 116
By bradymiller:

Need to escape $specialty_id within the value tag:
echo htmlspecialchars($specialty_id,ENT_QUOTES)