diff --git a/src/menu/InjectItem.php b/src/menu/InjectItem.php
index <HASH>..<HASH> 100644
--- a/src/menu/InjectItem.php
+++ b/src/menu/InjectItem.php
@@ -443,10 +443,10 @@ class InjectItem extends BaseObject implements InjectItemInterface
             'nav_id' => $this->getNavId(),
             'lang' => $this->getLang(),
             'link' => $this->getLink(),
-            'title' => $this->title,
-            'title_tag' => $this->title,
+            'title' => Yii::$app->menu->encodeValue($this->title),
+            'title_tag' => Yii::$app->menu->encodeValue($this->title),
             'alias' => $this->getAlias(),
-            'description' => $this->description,
+            'description' => Yii::$app->menu->encodeValue($this->description),
             'keywords' => null,
             'create_user_id' => $this->createUserId,
             'update_user_id' => $this->updateUserId,
fix xss issue with page previews #<I>