diff --git a/htdocs/product/stock/movement_list.php b/htdocs/product/stock/movement_list.php index 06c283eef59..c0e37902b6c 100644 --- a/htdocs/product/stock/movement_list.php +++ b/htdocs/product/stock/movement_list.php @@ -1481,11 +1481,11 @@ while ($i < $imaxinloop) { } if (!empty($arrayfields['m.inventorycode']['checked'])) { // Inventory code - print 'inventorycode.'$').'&search_type_mouvement='.urlencode($obj->type_mouvement).'">'.$obj->inventorycode.''; + print 'inventorycode.'$').'">'.dol_escape_htmltag($obj->inventorycode).''; } if (!empty($arrayfields['m.label']['checked'])) { // Label of movement - print ''.$obj->label.''; + print ''.dol_escape_htmltag($obj->label).''; } if (!empty($arrayfields['origin']['checked'])) { // Origin of movement