diff --git a/Classes/View/Form.php b/Classes/View/Form.php
index d98bec9..5e8a130 100644
--- a/Classes/View/Form.php
+++ b/Classes/View/Form.php
@@ -480,7 +480,7 @@ protected function fillDefaultMarkers()
         }
         if ($this->gp['formToken']) {
             $markers['###HIDDEN_FIELDS###'] .= '
-				<input type="hidden" name="' . $name . '" value="' . $this->gp['formToken'] . '" />
+				<input type="hidden" name="' . $name . '" value="' . htmlspecialchars($this->gp['formToken']) . '" />
 			';
         }