diff --git a/frappe/__init__.py b/frappe/__init__.py
index d5ece4a417..2d7d01e763 100644
--- a/frappe/__init__.py
+++ b/frappe/__init__.py
@@ -14,7 +14,7 @@ import os, sys, importlib, inspect, json
 from .exceptions import *
 from .utils.jinja import get_jenv, get_template, render_template, get_email_from_template
 
-__version__ = '10.0.1'
+__version__ = '10.0.2'
 __title__ = "Frappe Framework"
 
 local = Local()
diff --git a/frappe/templates/includes/login/login.js b/frappe/templates/includes/login/login.js
index d02d449c38..3584998434 100644
--- a/frappe/templates/includes/login/login.js
+++ b/frappe/templates/includes/login/login.js
@@ -18,7 +18,7 @@ login.bind_events = function() {
 		var args = {};
 		args.cmd = "login";
 		args.usr = frappe.utils.xss_sanitise(($("#login_email").val() || "").trim());
-		args.pwd = frappe.utils.xss_sanitise($("#login_password").val());
+		args.pwd = $("#login_password").val();
 		args.device = "desktop";
 		if(!args.usr || !args.pwd) {
 			frappe.msgprint("{{ _("Both login and password required") }}");