diff --git a/package-lock.json b/package-lock.json
index 10102b1a9..b13f4671a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -33,6 +33,7 @@
         "debounce": "^1.2.1",
         "downloadjs": "^1.4.7",
         "ical.js": "^1.5.0",
+        "lodash": "^4.17.21",
         "moment": "^2.29.4",
         "p-limit": "^4.0.0",
         "qr-image": "^3.2.0",
@@ -12689,8 +12690,9 @@
     },
     "node_modules/lodash": {
       "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
       "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "dev": true
+      "license": "MIT"
     },
     "node_modules/lodash.debounce": {
       "version": "4.0.8",
@@ -28598,8 +28600,8 @@
     },
     "lodash": {
       "version": "4.17.21",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "dev": true
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lodash.debounce": {
       "version": "4.0.8",
diff --git a/package.json b/package.json
index d27830733..48dca1ca9 100644
--- a/package.json
+++ b/package.json
@@ -60,6 +60,7 @@
     "debounce": "^1.2.1",
     "downloadjs": "^1.4.7",
     "ical.js": "^1.5.0",
+    "lodash": "^4.17.21",
     "moment": "^2.29.4",
     "p-limit": "^4.0.0",
     "qr-image": "^3.2.0",
diff --git a/src/components/ContactDetails.vue b/src/components/ContactDetails.vue
index b9c1a6f0f..f88a0bd49 100644
--- a/src/components/ContactDetails.vue
+++ b/src/components/ContactDetails.vue
@@ -369,6 +369,7 @@
 </template>
 
 <script>
+import escape from 'lodash/fp/escape.js'
 import { showError } from '@nextcloud/dialogs'
 
 import { stringify } from 'ical.js'
@@ -717,9 +718,9 @@ export default {
 					organization,
 				})
 			} else if (title) {
-				return title
+				return escape(title)
 			} else if (organization) {
-				return organization
+				return escape(organization)
 			}
 
 			return ''