diff --git a/src/usr/local/www/services_dhcp.php b/src/usr/local/www/services_dhcp.php
index e37c536020..b0e6e1f258 100644
--- a/src/usr/local/www/services_dhcp.php
+++ b/src/usr/local/www/services_dhcp.php
@@ -1163,7 +1163,7 @@ if (is_numeric($pool) || ($act === 'newpool')) {
 			sprintf('%s - %s%s',
 				array_get_path($range, 'from'),
 				array_get_path($range, 'to'),
-				!empty($range['descr']) ? ' ('.$range['descr'].')' : null
+				!empty($range['descr']) ? ' ('.htmlspecialchars($range['descr']).')' : null
 			)
 		));
 		$first = false;