diff --git a/templates/ktcore/forms/widgets/password.smarty b/templates/ktcore/forms/widgets/password.smarty
index 56d56e5..cfb4c04 100644
--- a/templates/ktcore/forms/widgets/password.smarty
+++ b/templates/ktcore/forms/widgets/password.smarty
@@ -1,9 +1,9 @@
-      <input type="password" name="{$name}{if ($context->bConfirm)}[base]{/if}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
+      <input type="password" name="{$name}{if ($context->bConfirm)}[base]{/if}" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
 
     {if ($context->bConfirm)}
     <br />    <br />
       <label for="{$name}">{i18n arg_label=$label}Confirm #label#{/i18n}{if ($required === true)}<span class="required">({i18n}Required{/i18n})</span>{/if}</label>
       <p class="descriptiveText">{$context->sConfirmDescription}</p>
-      
-      <input type="password" name="{$name}[confirm]" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>  
+
+      <input type="password" name="{$name}[confirm]" {if $has_id}id="{$id}"{/if} {if $has_value}value="{$value|sanitize_input}"{/if}{if ($options.autocomplete === false)}autocomplete="off"{/if}/>
     {/if}