diff --git a/htdocs/hrm/index.php b/htdocs/hrm/index.php
index 2315edc100c..cdce14780f9 100644
--- a/htdocs/hrm/index.php
+++ b/htdocs/hrm/index.php
@@ -233,8 +233,8 @@ if (!empty($conf->holiday->enabled) && $user->rights->holiday->read) {
print '
';
print '| '.$holidaystatic->getNomUrl(1).' | ';
- print ''.$userstatic->getNomUrl(-1, 'leave').' | ';
- print ''.$typeleaves[$obj->fk_type]['label'].' | ';
+ print ''.$userstatic->getNomUrl(-1, 'leave').' | ';
+ print ''.dol_escape_htmltag($typeleaves[$obj->fk_type]['label']).' | ';
$starthalfday = ($obj->halfday == -1 || $obj->halfday == 2) ? 'afternoon' : 'morning';
$endhalfday = ($obj->halfday == 1 || $obj->halfday == 2) ? 'morning' : 'afternoon';