diff --git a/question/type/multianswer/questiontype.php b/question/type/multianswer/questiontype.php
index e9d71e6b740..8871b471129 100644
--- a/question/type/multianswer/questiontype.php
+++ b/question/type/multianswer/questiontype.php
@@ -291,7 +291,7 @@ class embedded_cloze_qtype extends default_questiontype {
                 case 'shortanswer':
                 case 'numerical':
                     echo " <input $style $readonly $popup name=\"$inputname\"
-                            type=\"text\" value=\"$response\" size=\"12\" /> ";
+                            type=\"text\" value=\"".s($response)."\" size=\"12\" /> ";
                     break;
                 case 'multichoice':
                     $outputoptions = '<option></option>'; // Default empty option