Index: modules/system/system.admin.inc
===================================================================
RCS file: /cvs/drupal/drupal/modules/system/system.admin.inc,v
retrieving revision 1.63.2.14
diff -u -B -r1.63.2.14 system.admin.inc
--- modules/system/system.admin.inc	1 Mar 2010 10:20:28 -0000	1.63.2.14
+++ modules/system/system.admin.inc	14 Sep 2010 19:58:20 -0000
@@ -1829,11 +1829,12 @@
   if (empty($block['content'])) {
     return '';
   }
+  $title = check_plain($block['title']);
 
   $output = <<< EOT
   <div class="admin-panel">
     <h3>
-      $block[title]
+      $title
     </h3>
     <div class="body">
       <p class="description">