diff --git a/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php b/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php
index f3ee3c0f4b..5492eeefac 100644
--- a/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php
+++ b/plugins/bc-admin-third/templates/plugin/BcMail/Admin/element/Dashboard/mail_messages.php
@@ -29,7 +29,7 @@
         <ul class="bca-content-info__list">
           <li class="bca-content-info__list-item">
             <?php foreach($this->Mail->getPublishedMailContents($site->id) as $mailContent): ?>
-              <?php echo $mailContent->content->title ?>：
+              <?php echo h($mailContent->content->title) ?>：
               <?php $this->BcBaser->link(
                 __d('baser_core', '{0} 件', $mailContent->getNumberOfMessages()),
                 ['plugin' => 'BcMail', 'controller' => 'MailMessages', 'action' => 'index', $mailContent->id]