diff --git a/templates/tibiacom/index.php b/templates/tibiacom/index.php
index 95c73c33..06c58e50 100644
--- a/templates/tibiacom/index.php
+++ b/templates/tibiacom/index.php
@@ -28,7 +28,7 @@ if(isset($config['boxes']))
 		<?php
 			if(PAGE !== 'news') {
 				if(isset($_REQUEST['subtopic'])) {
-					$tmp = $_REQUEST['subtopic'];
+					$tmp = escapeHtml($_REQUEST['subtopic']);
 					if($tmp === 'accountmanagement') {
 						$tmp = 'accountmanage';
 					}