html can be entered into some text strings in the system and will cause incorrect output.
Review all such input fields, comments, text input etc and use addslashes/strip slashes
Log in to post a comment.