diff --git a/src/usr/local/www/vpn_ipsec_phase2.php b/src/usr/local/www/vpn_ipsec_phase2.php
index 280f4a6a38..6099e20cc1 100644
--- a/src/usr/local/www/vpn_ipsec_phase2.php
+++ b/src/usr/local/www/vpn_ipsec_phase2.php
@@ -603,7 +603,7 @@ if (!empty($pconfig['ikeid'])) {
 	$p1name .= ')';
 	$section->addInput(new Form_StaticText(
 		'Phase 1',
-		$p1name .
+		htmlspecialchars($p1name) .
 		' <a class="fa-solid fa-pencil" href="vpn_ipsec_phase1.php?ikeid=' . $p1['ikeid'] . '" title="' . gettext("Edit Phase 1 Entry") . '"></a>'
 	));
 }