diff --git a/fix-CVE-2012-2129.patch b/fix-CVE-2012-2129.patch
new file mode 100644
index 0000000..7836225
--- /dev/null
+++ b/fix-CVE-2012-2129.patch
@@ -0,0 +1,12 @@
+diff -ruN dokuwiki-2011-05-25a.orig/inc/html.php dokuwiki-2011-05-25a/inc/html.php
+--- dokuwiki-2011-05-25a.orig/inc/html.php	2011-06-14 21:58:53.000000000 +0200
++++ dokuwiki-2011-05-25a/inc/html.php	2012-04-24 06:59:27.365004291 +0200
+@@ -1283,7 +1283,7 @@
+     global $TEXT;
+ 
+     if ($param['target'] !== 'section') {
+-        msg('No editor for edit target ' . $param['target'] . ' found.', -1);
++        msg('No editor for edit target ' . hsc($param['target']) . ' found.', -1);
+     }
+ 
+     $attr = array('tabindex'=>'1');