diff --git a/CHANGELOG.md b/CHANGELOG.md
index 96633dd..a163740 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## [UNRELEASED]
 
+### Fixed
+
+- Display asset names correctly in the replacement form
+
 ## [2.10.5] - 2026-08-31
 
 ### Fixed
diff --git a/inc/replace.class.php b/inc/replace.class.php
index 15839d1..2bda125 100644
--- a/inc/replace.class.php
+++ b/inc/replace.class.php
@@ -868,7 +868,7 @@ public static function showReplacementForm($type, $model_id, $tab_ids, $location
                 $commonitem->getFromDB($id);
 
                 echo "<tr class='tab_bg_1 center'>";
-                echo "<td>" . $commonitem->getName() . "</td>";
+                echo "<td>" . htmlescape($commonitem->getName()) . "</td>";
 
                 if (Search::getOptionNumber($type, 'otherserial')) {
                     echo "<td>" . htmlentities((string) $commonitem->fields['otherserial']) . "</td>";