diff --git a/libraries/session.inc.php b/libraries/session.inc.php
index f1e6370df5..d83f3c969a 100644
--- a/libraries/session.inc.php
+++ b/libraries/session.inc.php
@@ -88,7 +88,7 @@ function PMA_sessionFailed($errors)
         $messages[] = preg_replace(
             '/open(.*, O_RDWR)/',
             'open(SESSION_FILE, O_RDWR)',
-            $error->getMessage()
+            htmlspecialchars($error->getMessage())
         );
     }