diff --git a/templates/components/cart/content.html b/templates/components/cart/content.html
index 2f4b1dcc12..7959c87782 100644
--- a/templates/components/cart/content.html
+++ b/templates/components/cart/content.html
@@ -40,7 +40,7 @@ <h4 class="cart-item-name"><a href="{{url}}">{{name}}</a></h4>
                                     {{#if is_file}}
                                         <a href="/viewfile.php?attributeId={{../id}}&cartitem={{../../id}}">{{value}}</a>
                                     {{else}}
-                                        {{value}}
+                                        {{{ sanitize value}}}
                                     {{/if}}
                                 </dd>
                             {{/each}}
diff --git a/templates/components/cart/preview.html b/templates/components/cart/preview.html
index eee1a4fef9..dac2b6ae1a 100644
--- a/templates/components/cart/preview.html
+++ b/templates/components/cart/preview.html
@@ -88,7 +88,7 @@ <h4 class="productView-title">
                                 {{name}}
                             </dt>
                             <dd class="productView-info-value">
-                                {{value}}
+                                {{{ sanitize value}}}
                             </dd>
                         </dl>
                     {{/each}}
diff --git a/templates/components/products/product-view.html b/templates/components/products/product-view.html
index 504f5df65d..fe91c3ba9e 100644
--- a/templates/components/products/product-view.html
+++ b/templates/components/products/product-view.html
@@ -146,7 +146,7 @@ <h2 class="productView-brand"{{#if schema}} itemprop="brand" itemscope itemtype=
                 {{#if theme_settings.show_custom_fields_tabs '!==' true}}
                     {{#each product.custom_fields}}
                         <dt class="productView-info-name">{{name}}:</dt>
-                        <dd class="productView-info-value">{{{value}}}</dd>
+                        <dd class="productView-info-value">{{{ sanitize value}}}</dd>
                     {{/each}}
                 {{/if}}
             </dl>