diff --git a/frontend/src/pages/institution-admin/user-list-search/index.js b/frontend/src/pages/institution-admin/user-list-search/index.js
index 8a85a1a414..d5454ae23d 100644
--- a/frontend/src/pages/institution-admin/user-list-search/index.js
+++ b/frontend/src/pages/institution-admin/user-list-search/index.js
@@ -5,6 +5,7 @@ import { gettext } from '../../../utils/constants';
 import CommonOperationConfirmationDialog from '../../../components/dialog/common-operation-confirmation-dialog';
 import UserItem from '../user-list/user-item';
 import instAdminAPI from '../api';
+import { Utils } from '../../../utils/utils';
 
 const UserListSearch = () => {
   const [isLoading, setIsLoading] = useState(true);
@@ -27,7 +28,7 @@ const UserListSearch = () => {
 
   const deleteInstUserToggle = useCallback((user) => {
     if (user) {
-      const deleteMessage = gettext('Are you sure you want to delete {placeholder} ?').replace('{placeholder}', user.name);
+      const deleteMessage = gettext('Are you sure you want to delete {placeholder} ?').replace('{placeholder}', Utils.HTMLescape(user.name));
       setDeleteUser(user);
       setDeleteMessage(deleteMessage);
     }
diff --git a/frontend/src/pages/institution-admin/user-list/index.js b/frontend/src/pages/institution-admin/user-list/index.js
index 42bdd05402..a6176ca315 100644
--- a/frontend/src/pages/institution-admin/user-list/index.js
+++ b/frontend/src/pages/institution-admin/user-list/index.js
@@ -6,6 +6,7 @@ import Paginator from '../../../components/paginator';
 import CommonOperationConfirmationDialog from '../../../components/dialog/common-operation-confirmation-dialog';
 import UserItem from './user-item';
 import instAdminAPI from '../api';
+import { Utils } from '../../../utils/utils';
 
 const UserList = ({ onUserLinkClick }) => {
   const [isLoading, setIsLoading] = useState(true);
@@ -68,7 +69,7 @@ const UserList = ({ onUserLinkClick }) => {
 
   const deleteInstUserToggle = useCallback((user) => {
     if (user) {
-      const deleteMessage = gettext('Are you sure you want to delete {placeholder} ?').replace('{placeholder}', user.name);
+      const deleteMessage = gettext('Are you sure you want to delete {placeholder} ?').replace('{placeholder}', Utils.HTMLescape(user.name));
       setDeleteUser(user);
       setDeleteMessage(deleteMessage);
     }
diff --git a/frontend/src/tc-accept.js b/frontend/src/tc-accept.js
index 83e7461a8a..c8ff5f752b 100644
--- a/frontend/src/tc-accept.js
+++ b/frontend/src/tc-accept.js
@@ -5,6 +5,7 @@ import { gettext } from './utils/constants';
 import Logo from './components/logo';
 import Account from './components/common/account';
 import TermsPreviewWidget from './components/terms-preview-widget';
+import { Utils } from './utils/utils';
 
 import './css/tc-accept.css';
 
@@ -30,7 +31,7 @@ class TCAccept extends React.Component {
         </div>
         <div className="o-auto">
           <div className="py-4 px-4 my-6 mx-auto content">
-            <h2 dangerouslySetInnerHTML={{ __html: termsName }}></h2>
+            <h2 dangerouslySetInnerHTML={{ __html: Utils.HTMLescape(termsName) }}></h2>
             <div className="article">
               <TermsPreviewWidget content={termsText} />
             </div>
diff --git a/frontend/src/tc-view.js b/frontend/src/tc-view.js
index a7f75d4778..40d6e2e60f 100644
--- a/frontend/src/tc-view.js
+++ b/frontend/src/tc-view.js
@@ -3,6 +3,7 @@ import ReactDom from 'react-dom';
 import Logo from './components/logo';
 import Account from './components/common/account';
 import TermsPreviewWidget from './components/terms-preview-widget';
+import { Utils } from './utils/utils';
 
 import './css/tc-accept.css';
 
@@ -22,7 +23,7 @@ class TCView extends React.Component {
         </div>
         <div className="o-auto">
           <div className="py-4 px-4 my-6 mx-auto content">
-            <h2 dangerouslySetInnerHTML={{ __html: termsName }}></h2>
+            <h2 dangerouslySetInnerHTML={{ __html: Utils.HTMLescape(termsName) }}></h2>
             <div className="article">
               <TermsPreviewWidget content={termsText} />
             </div>