Covering our XSS bases

git-svn-id: https://develop.svn.wordpress.org/trunk@9233 602fd350-edb4-49c9-b593-d223f7449a82

wp-admin/plugins.php

@@ -203,7 +203,7 @@ if( !empty($invalid) )
 <?php endif; ?>
 
 <div class="wrap">
-	<h2><?php echo $title ?></h2> 
+	<h2><?php echo wp_specialchars( $title ); ?></h2> 
 
 <p><?php _e('Plugins extend and expand the functionality of WordPress. Once a plugin is installed, you may activate it or deactivate it here.'); ?></p>
 <?php