diff --git a/frappe/core/page/modules_setup/includes/module_icons.html b/frappe/core/page/modules_setup/includes/module_icons.html
index 12a23feecc..f388bbc97d 100644
--- a/frappe/core/page/modules_setup/includes/module_icons.html
+++ b/frappe/core/page/modules_setup/includes/module_icons.html
@@ -5,7 +5,7 @@
 	    <label>
 	      <input type="checkbox" data-module="{{ icon.module_name }}" class="module-select"
 					{% if not (icon.hidden if user else icon.blocked) %}checked{% endif %}>
-					{{ _(icon.label or icon.module_name) }}
+					{{ frappe.db.escape(_(icon.label or icon.module_name)) }}
 	    </label>
 	  </div>
 	</div>
diff --git a/frappe/utils/jinja.py b/frappe/utils/jinja.py
index b9fb9867ce..ce35a43788 100644
--- a/frappe/utils/jinja.py
+++ b/frappe/utils/jinja.py
@@ -153,6 +153,7 @@ def get_allowed_functions_for_jenv():
 		out['frappe']["db"] = {
 			"get_value": frappe.db.get_value,
 			"get_default": frappe.db.get_default,
+			"escape": frappe.db.escape,
 		}
 
 	return out