diff --git a/include/adminlist.php b/include/adminlist.php
index bcff7e7..3470eaa 100644
--- a/include/adminlist.php
+++ b/include/adminlist.php
@@ -66,10 +66,10 @@ function getAdminList() {
                     $offlineClients[] = '<p><span class="label label-primary iconspacer">' . htmlspecialchars($userInfo['client_nickname']) . '</span><span class="label label-danger pull-right">' . translate($lang["adminlist"]["status"]["offline"]) . '</span></p>';
                     continue;
                 }
-                if($user["client_away_message"] == "") {
+                if(!$user["client_away_message"]) {
                     $userAway = translate($lang["adminlist"]["status"]["away"]);
                 }else{
-                    $userAway = $user["client_away_message"];
+                    $userAway = htmlspecialchars($user["client_away_message"]);
                 }
                 $onlineClients[] = '<p><img src="lib/ts3phpframework/images/viewer/' . $user->getIcon() . '.png" alt="User status">' . '<span class="label label-primary">' . htmlspecialchars($user) . '</span>' . ($user['client_away'] ? '<span class="label label-warning pull-right">' . $userAway . '</span>' : '<span class="label label-success pull-right">' . translate($lang["adminlist"]["status"]["online"]) . '</span>') . '</p>';
             }