diff --git a/libraries/classes/Server/Privileges.php b/libraries/classes/Server/Privileges.php
index 67c7cca9c0..301b8fd705 100644
--- a/libraries/classes/Server/Privileges.php
+++ b/libraries/classes/Server/Privileges.php
@@ -3554,7 +3554,7 @@ class Privileges
                     $hashedPassword = $_POST['pma_pw'];
                 }
 
-                $createUserReal = sprintf($createUserStmt, $hashedPassword);
+                $createUserReal = sprintf($createUserStmt, $this->dbi->escapeString($hashedPassword));
                 $createUserShow = sprintf($createUserStmt, '***');
             }
         } else {