diff --git a/application/views/qso/edit_ajax.php b/application/views/qso/edit_ajax.php
index f7e7d097..d5ea0d2b 100644
--- a/application/views/qso/edit_ajax.php
+++ b/application/views/qso/edit_ajax.php
@@ -187,7 +187,7 @@
 
                                 <div class="form-group">
                                     <label for="comment">Comment</label>
-                                    <input type="text" class="form-control" id="comment" name="comment" value="<?php echo $qso->COL_COMMENT; ?>">
+                                    <input type="text" class="form-control" id="comment" name="comment" value="<?php echo htmlspecialchars($qso->COL_COMMENT, ENT_QUOTES, 'UTF-8'); ?>">
                                 </div>
 
                                 <div class="form-row">