diff --git a/library/MedEx/API.php b/library/MedEx/API.php
index a9722a220f2..2df71d2d275 100644
--- a/library/MedEx/API.php
+++ b/library/MedEx/API.php
@@ -1665,7 +1665,7 @@ public function preferences($prefs = '')
                                             <div class="divTableRow">
                                                 <div class="divTableCell divTableHeading">MedEx <?php echo xlt('Username'); ?></div>
                                                 <div class="divTableCell indent20">
-                                                    <?php echo $prefs['ME_username']; ?>
+                                                    <?php echo text($prefs['ME_username']); ?>
                                                 </div>
                                             </div>
                                             <div class="divTableRow">