diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue
index 0606a1db49..76efa88a44 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue
@@ -224,7 +224,7 @@ export default {
                             '<a href="/cgi-bin/koha/erm/agreements/' +
                             row.agreement_id +
                             '" class="show">' +
-                            row.name +
+                            escape_str(row.name) +
                             "</a>"
                         )
                     },
@@ -235,7 +235,9 @@ export default {
                     searchable: true,
                     orderable: true,
                     render: function (data, type, row, meta) {
-                        return row.vendor_id != undefined ? row.vendor.name : ""
+                        return row.vendor_id != undefined
+                            ? escape_str(row.vendor.name)
+                            : ""
                     },
                 },
                 {
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue
index 70ba46b3c0..86c3a311fd 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue
@@ -140,7 +140,7 @@ export default {
                             '<a href="/cgi-bin/koha/erm/licenses/' +
                             row.license_id +
                             '" class="show">' +
-                            row.name +
+                            escape_str(row.name) +
                             "</a>"
                         )
                     },
@@ -151,7 +151,9 @@ export default {
                     searchable: true,
                     orderable: true,
                     render: function (data, type, row, meta) {
-                        return row.vendor_id != undefined ? row.vendor.name : ""
+                        return row.vendor_id != undefined
+                            ? escape_str(row.vendor.name)
+                            : ""
                     },
                 },
 
diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue
index 6965576a99..3e5d809ed0 100644
--- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue
+++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue
@@ -50,6 +50,17 @@ export default {
                 },
                 buttons,
                 search: { search: this.$route.query.q },
+                columnDefs: [
+                    {
+                        targets: "_all",
+                        render: function (data, type, row, meta) {
+                            if (type == "display") {
+                                return escape_str(data)
+                            }
+                            return data
+                        },
+                    },
+                ],
                 ...this.options,
             },
             hidden_ids,