diff --git a/server_status.php b/server_status.php
index 52b9d894bc..4590812e62 100644
--- a/server_status.php
+++ b/server_status.php
@@ -900,11 +900,11 @@ function printQueryStatistics()
     ?>
             <tr class="<?php echo $odd_row ? 'odd' : 'even'; ?>">
                 <th class="name"><?php echo htmlspecialchars($name); ?></th>
-                <td class="value"><?php echo PMA_formatNumber($value, 5, 0, true); ?></td>
+                <td class="value"><?php echo htmlspecialchars(PMA_formatNumber($value, 5, 0, true)); ?></td>
                 <td class="value"><?php echo
-                    PMA_formatNumber($value * $hour_factor, 4, 1, true); ?></td>
+                    htmlspecialchars(PMA_formatNumber($value * $hour_factor, 4, 1, true)); ?></td>
                 <td class="value"><?php echo
-                    PMA_formatNumber($value * $perc_factor, 0, 2); ?>%</td>
+                    htmlspecialchars(PMA_formatNumber($value * $perc_factor, 0, 2)); ?>%</td>
             </tr>
     <?php
     }