diff --git a/src/controllers/groups.js b/src/controllers/groups.js
index e7b32899b7..c61d84a1a9 100644
--- a/src/controllers/groups.js
+++ b/src/controllers/groups.js
@@ -23,6 +23,7 @@ groupsController.list = async function (req, res) {
 	res.render('groups/list', {
 		groups: groupData,
 		allowGroupCreation: allowGroupCreation,
+		sort: validator.escape(String(sort)),
 		nextStart: 15,
 		title: '[[pages:groups]]',
 		breadcrumbs: helpers.buildBreadcrumbs([{ text: '[[pages:groups]]' }]),