diff --git a/application/modules/default/views/scripts/product/add.phtml b/application/modules/default/views/scripts/product/add.phtml
--- a/application/modules/default/views/scripts/product/add.phtml
+++ b/application/modules/default/views/scripts/product/add.phtml
@@ -162,7 +162,7 @@
                                                name="title"
                                                <?php //pattern="^[ .\-&_A-z0-9]{1,}$" ?>
                                                <?php //  pattern="^[^\\'\^;*!\u0022\$]{1,}$" ?>
-                                               value="<?= $this->form->title->getValue() ?>"
+                                               value="<?= htmlspecialchars($this->form->title->getValue()) ?>"
                                                maxlength="60"
                                                aria-required="true"
                                                aria-invalid="false"