diff --git a/ndxzstudio/module/exhibits/edits.js b/ndxzstudio/module/exhibits/edits.js
index 0dd01cb..918a1c1 100644
--- a/ndxzstudio/module/exhibits/edits.js
+++ b/ndxzstudio/module/exhibits/edits.js
@@ -248,6 +248,7 @@ function updateText(ida)
 	{
 		// silly that it really needs 'name' instead of 'id'
 		var text = tinyMCE.getInstanceById('content').getHTML();
+		text = text.replace("<script>", "") // Simple XSS Protection
 	}
 	
 	$.post('?a='+action, { upd_jxtext : 'true', v : text, id : ida }, 
@@ -769,4 +770,4 @@ function create_exhibit(state)
 				window.parent.location.href = html;
 		});
 	}
-}
\ No newline at end of file
+}