XSS vulnerability at profile page

Steps to reproduce:

1. Open profile page of user '><script>alert()</script>' http://qa.jtalks.org/jcommune/users/11448.

Actual result: script executes, pop-up window appears.
Expected result: script in username isn't executed.