diff --git a/src/controllers/itemDetails/index.js b/src/controllers/itemDetails/index.js
index 86ebf163be..b5cd1848e2 100644
--- a/src/controllers/itemDetails/index.js
+++ b/src/controllers/itemDetails/index.js
@@ -1318,7 +1318,7 @@ function renderTags(page, item) {
serverId: item.ServerId
});
tagElements.push(
- ``
+ ``
+ escapeHtml(tag)
+ ''
);