diff --git a/public_html/wp-content/plugins/wordcamp-organizer-reminders/wcor-reminder.php b/public_html/wp-content/plugins/wordcamp-organizer-reminders/wcor-reminder.php
index bdbb2e085..1a2845803 100644
--- a/public_html/wp-content/plugins/wordcamp-organizer-reminders/wcor-reminder.php
+++ b/public_html/wp-content/plugins/wordcamp-organizer-reminders/wcor-reminder.php
@@ -201,7 +201,7 @@ protected function save_post_meta( $post, $new_meta ) {
 
 		delete_post_meta( $post->ID, 'wcor_transparency_report' );
 		if ( isset( $new_meta['wcor_transparency_report'] ) ) {
-			update_post_meta( $post->ID, 'wcor_transparency_report', $new_meta['wcor_transparency_report'] );
+			update_post_meta( $post->ID, 'wcor_transparency_report', sanitize_text_field( $new_meta['wcor_transparency_report'] ) );
 		}
 
 		if ( isset( $new_meta['wcor_send_days_before'] ) ) {