diff --git a/data/templates/sidebar.block.search.php b/data/templates/sidebar.block.search.php
index f4e6b42..d3cd8a5 100644
--- a/data/templates/sidebar.block.search.php
+++ b/data/templates/sidebar.block.search.php
@@ -34,7 +34,7 @@ foreach ($lastSearches as $row) {
     echo  '<a href="'
         . htmlspecialchars(createURL('search', $range.'/'.$row['shTerms']))
         . '">';
-    echo $row['shTerms'];
+    echo htmlspecialchars($row['shTerms']);
     echo '</a>';
     echo ' <span title="'
         . T_('Number of bookmarks for this query')