diff --git a/userfiles/modules/settings/group/template.php b/userfiles/modules/settings/group/template.php
index 46416f52143..2edfa9e001f 100644
--- a/userfiles/modules/settings/group/template.php
+++ b/userfiles/modules/settings/group/template.php
@@ -60,7 +60,7 @@ function mw_set_default_template() {
         $change_template = true;
         $selected_template = $_GET['template'];
     }
-
+    $selected_template = xss_clean($selected_template);
     ?>
 <?php if($change_template){ ?>
     <div class="alert alert-dismissible alert-primary">