diff --git a/lib/Service/UserService.php b/lib/Service/UserService.php
index c8ad16b865cf595c719d53bfb0e72be13de14ccf..ae235538e318d09917720727a31f7afff57d50ee 100644
--- a/lib/Service/UserService.php
+++ b/lib/Service/UserService.php
@@ -313,9 +313,9 @@ class UserService {
 	private function addNewUserToLDAP(string $displayName, string $recoveryEmail, string $username, string $userEmail, string $password): void {
 		$connection = $this->LDAPConnectionService->getLDAPConnection();
 		$base = $this->LDAPConnectionService->getLDAPBaseUsers()[0];
-		
 		$newUserDN = "username=$username," . $base;
 		
+		$displayName = htmlspecialchars($displayName);
 		$quota = $this->getDefaultQuota() * 1024 * 1024;
 		
 		$newUserEntry = [