diff --git a/app/call_recordings/call_recording_edit.php b/app/call_recordings/call_recording_edit.php
index c78c8ebc42..cd90a4a3d3 100644
--- a/app/call_recordings/call_recording_edit.php
+++ b/app/call_recordings/call_recording_edit.php
@@ -249,7 +249,7 @@
 	echo "	<tr>\n";
 	echo "		<td colspan='2' align='right'>\n";
 	if ($action == "update") {
-		echo "				<input type='hidden' name='call_recording_uuid' value='$call_recording_uuid'>\n";
+		echo "				<input type='hidden' name='call_recording_uuid' value='".escape($call_recording_uuid)."'>\n";
 	}
 	echo "				<input type='submit' class='btn' value='".$text['button-save']."'>\n";
 	echo "		</td>\n";