From ad638f751e68db42a84cd757158af6170cf5fd6a Mon Sep 17 00:00:00 2001
From: AlexanderDCrane <40072887+AlexanderDCrane@users.noreply.github.com>
Date: Tue, 12 Jun 2018 13:22:50 -0600
Subject: [PATCH] Update user_edit.php (#3119)

---
 core/users/user_edit.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/users/user_edit.php b/core/users/user_edit.php
index b441f012d0..8b8df245c0 100644
--- a/core/users/user_edit.php
+++ b/core/users/user_edit.php
@@ -716,7 +716,7 @@ if (count($_POST) > 0 && $_POST["persistform"] != "1") {
 		echo "<br />\n";
 		echo $text['description-contact']."\n";
 		if (strlen($contact_uuid) > 0) {
-			echo "			<a href=\"".PROJECT_PATH."/app/contacts/contact_edit.php?id=$contact_uuid\">".$text['description-contact_view']."</a>\n";
+			echo "			<a href=\"".PROJECT_PATH."/app/contacts/contact_edit.php?id=".escape($contact_uuid)."\">".$text['description-contact_view']."</a>\n";
 		}
 		echo "		</td>";
 		echo "	</tr>";