diff --git a/public/src/client/account/info.js b/public/src/client/account/info.js
index 6e57439bff..05631ffa4f 100644
--- a/public/src/client/account/info.js
+++ b/public/src/client/account/info.js
@@ -21,7 +21,7 @@ define('forum/account/info', ['forum/account/header', 'components', 'forum/accou
 				app.alertSuccess('[[user:info.moderation-note.success]]');
 				var timestamp = Date.now();
 				var data = [{
-					note: note,
+					note: utils.escapeHTML(note),
 					user: app.user,
 					timestamp: timestamp,
 					timestampISO: utils.toISOString(timestamp),