diff --git a/usr/local/www/system_advanced_admin.php b/usr/local/www/system_advanced_admin.php
index 99588c29c1..a449452e01 100644
--- a/usr/local/www/system_advanced_admin.php
+++ b/usr/local/www/system_advanced_admin.php
@@ -381,7 +381,7 @@ function prot_change() {
 													$selected = "selected=\"selected\"";
 												}
 										?>
-										<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=$cert['descr'];?></option>
+										<option value="<?=$cert['refid'];?>" <?=$selected;?>><?=htmlspecialchars($cert['descr']);?></option>
 										<?php
 											endforeach;
 											if (!count($a_cert)) {