diff --git a/data/web/edit.php b/data/web/edit.php
index fb3828092..a9334833d 100644
--- a/data/web/edit.php
+++ b/data/web/edit.php
@@ -505,7 +505,7 @@ if (isset($_SESSION['mailcow_cc_role']) && ($_SESSION['mailcow_cc_role'] == "adm
 					<div class="form-group">
 						<label class="control-label col-sm-2" for="description"><?=$lang['add']['description'];?></label>
 						<div class="col-sm-10">
-							<input type="text" class="form-control" name="description" id="description" value="<?=$result['description'];?>" required>
+							<input type="text" class="form-control" name="description" id="description" value="<?=htmlspecialchars($result['description'], ENT_QUOTES, 'UTF-8');?>" required>
 						</div>
 					</div>
 					<div class="form-group">