diff --git a/src/categories/data.js b/src/categories/data.js
index d50e7e1a0b..4568d4850d 100644
--- a/src/categories/data.js
+++ b/src/categories/data.js
@@ -86,7 +86,7 @@ function modifyCategory(category, fields) {
 
 	db.parseIntFields(category, intFields, fields);
 
-	const escapeFields = ['name', 'color', 'bgColor', 'imageClass', 'class', 'link'];
+	const escapeFields = ['name', 'color', 'bgColor', 'backgroundImage', 'imageClass', 'class', 'link'];
 	escapeFields.forEach((field) => {
 		if (category.hasOwnProperty(field)) {
 			category[field] = validator.escape(String(category[field] || ''));