diff --git a/public/main/admin/languages.php b/public/main/admin/languages.php
index 9f2a10be3f3..382225850dd 100644
--- a/public/main/admin/languages.php
+++ b/public/main/admin/languages.php
@@ -282,15 +282,16 @@
             $checked = ' checked="checked" ';
         }
 
+        $originalName = htmlspecialchars($row['original_name'], ENT_QUOTES, 'UTF-8');
         $row_td[] = '
             <input type="hidden" name="edit_id" value="'.$id.'" />
-            <input type="text" name="txt_name" value="'.$row['original_name'].'" />
+            <input type="text" name="txt_name" value="'.$originalName.'" />
             <input type="checkbox" '.$checked.' name="platformlanguage" id="platformlanguage" value="'.$row['isocode'].'" />
-            <label for="platformlanguage">'.sprintf(get_lang('%s as platform language'), $row['original_name']).'</label>
+            <label for="platformlanguage">'.sprintf(get_lang('%s as platform language'), $originalName).'</label>
             <input class="btn btn--primary" type="submit" name="Submit" value="'.get_lang('Validate').'" />
             <a name="value" />';
     } else {
-        $row_td[] = $row['original_name'];
+        $row_td[] = htmlspecialchars($row['original_name'], ENT_QUOTES, 'UTF-8');
     }
 
     $row_td[] = $row['english_name'].' ('.$row['isocode'].')';