diff --git a/app/Http/Controllers/DeviceGroupController.php b/app/Http/Controllers/DeviceGroupController.php
index 2ad5ae479ed0..5375a7366db5 100644
--- a/app/Http/Controllers/DeviceGroupController.php
+++ b/app/Http/Controllers/DeviceGroupController.php
@@ -182,7 +182,7 @@ public function destroy(DeviceGroup $deviceGroup)
         }
         $deviceGroup->delete();
 
-        $msg = __('Device Group :name deleted', ['name' => $deviceGroup->name]);
+        $msg = __('Device Group :name deleted', ['name' => htmlentities($deviceGroup->name)]);
 
         return response($msg, 200);
     }
diff --git a/app/Http/Controllers/PortGroupController.php b/app/Http/Controllers/PortGroupController.php
index 4ce7bb48bb51..ae0961206d07 100644
--- a/app/Http/Controllers/PortGroupController.php
+++ b/app/Http/Controllers/PortGroupController.php
@@ -110,7 +110,7 @@ public function destroy(PortGroup $portGroup)
     {
         $portGroup->delete();
 
-        $msg = __('Port Group :name deleted', ['name' => $portGroup->name]);
+        $msg = __('Port Group :name deleted', ['name' => htmlentities($portGroup->name)]);
 
         return response($msg, 200);
     }