XSS in adding external link dialog

Steps to reproduce
1. Log in with permissions to edit external links.
2. Go to external links editor
3. Press "Add" button
4. Fill all fields with

<script>alert("Ha")<script>

5. Press "Save" button
IMPORTANT!!
do not close external link popup window unless you have DB access
6. Open JCommune main page in new tab.

Actual result

1. Window with link editor isn't closed
2. Layout is broken (see screenshot)
3. If user adds one more link - there is link with "data-original-title" title in link list.

Expected result
URL should be escaped when the page is rendered so that its symbols are not considered as special.