diff --git a/libraries/rte/rte_triggers.lib.php b/libraries/rte/rte_triggers.lib.php
index 0a9d27ceaf..92eb22dadf 100644
--- a/libraries/rte/rte_triggers.lib.php
+++ b/libraries/rte/rte_triggers.lib.php
@@ -317,7 +317,9 @@ function PMA_TRI_getEditorForm($mode, $item)
         } else if ($mode == 'edit' && $value == $item['item_table']) {
             $selected = " selected='selected'";
         }
-        $retval .= "            <option$selected>$value</option>\n";
+        $retval .= "<option$selected>";
+        $retval .= htmlspecialchars($value);
+        $retval .= "</option>\n";
     }
     $retval .= "        </select>\n";
     $retval .= "    </td>\n";