diff --git a/lib/Catalyst/Plugin/EscapeJs.pm b/lib/Catalyst/Plugin/EscapeJs.pm
new file mode 100644
index 0000000000..f7dc9b659f
--- /dev/null
+++ b/lib/Catalyst/Plugin/EscapeJs.pm
@@ -0,0 +1,16 @@
+package Catalyst::Plugin::EscapeJs;
+use warnings;
+use strict;
+use MRO::Compat;
+
+sub escape_js {
+    my $c = shift;
+    my $str = shift;
+    my $quote_char = shift;
+    $quote_char //= "'";
+    $str =~ s/\\/\\\\/g;
+    $str =~ s/$quote_char/\\$quote_char/g;
+    return $str;
+}
+
+1;
\ No newline at end of file
diff --git a/lib/NGCP/Panel.pm b/lib/NGCP/Panel.pm
index 1ba020b297..1cc24d79fe 100644
--- a/lib/NGCP/Panel.pm
+++ b/lib/NGCP/Panel.pm
@@ -27,6 +27,7 @@ use Catalyst qw/
     Session::Store::Redis
     Session::State::Cookie
     EscapeSensitiveValue
+    EscapeJs
     I18N
 /;
 use Log::Log4perl::Catalyst qw();
diff --git a/share/layout/body.tt b/share/layout/body.tt
index 340447d568..d0d2603347 100644
--- a/share/layout/body.tt
+++ b/share/layout/body.tt
@@ -145,7 +145,7 @@ var mainWrapperInit = function () {
     $('.sw_action_row').hover(
                     function() { $(this).find('.sw_actions').css('visibility','visible'); },
                     function() { $(this).find('.sw_actions').css('visibility','hidden'); }
-    ); 
+    );
 
     $('a[data-confirm]').live("click", function(ev) {
         var href = $(this).attr('href');
@@ -154,15 +154,15 @@ var mainWrapperInit = function () {
             $('body').append(
                 '<div id="dataConfirmModal" class="modal" role="dialog" aria-labelledby="dataConfirmLabel" aria-hidden="true">'+
                 '<div class="modal-header">'+
-                  '<h3 id="dataConfirmLabel">[% c.loc('Are you sure?') %]</h3>'+
+                  '<h3 id="dataConfirmLabel">[% c.escape_js(c.loc('Are you sure?')) %]</h3>'+
                 '</div>'+
                 '<div class="modal-footer">'+
-                  '<button class="btn" data-dismiss="modal" aria-hidden="true" id="dataConfirmCancel">[% c.loc('Cancel') %]</button>'+
-                  '<a class="btn btn-primary" id="dataConfirmOK">[% c.loc('OK') %]</a>'+
+                  '<button class="btn" data-dismiss="modal" aria-hidden="true" id="dataConfirmCancel">[% c.escape_js(c.loc('Cancel')) %]</button>'+
+                  '<a class="btn btn-primary" id="dataConfirmOK">[% c.escape_js(c.loc('OK')) %]</a>'+
                 '</div>'+
               '</div>'
             );
-        } 
+        }
         $('#dataConfirmOK').attr('href', href);
         if( href.search(/^javascript:/i ) > -1 ){
             $('#dataConfirmOK').attr('onclick', href);
@@ -205,7 +205,7 @@ var mainWrapperInit = function () {
         var backuri = $(this).data('backuri') ? $(this).data('backuri') : '[%- backuri | uri -%]';
         var _back = 'back='+backuri;
         if(_href == null || _href.match(/[&\?]back=/)) {
-            // ignore 
+            // ignore
         } else if(_href.match(/\?/)) {
             $(this).attr('href', _href + '&' + _back);
         } else {
diff --git a/share/templates/widgets/admin_billing_overview.tt b/share/templates/widgets/admin_billing_overview.tt
index d979a57127..f20c792e48 100644
--- a/share/templates/widgets/admin_billing_overview.tt
+++ b/share/templates/widgets/admin_billing_overview.tt
@@ -4,21 +4,21 @@ enqueLists.push([{
     widgetName: "AdminBillingOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.loc('Peering Costs') %]</li>');
+        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.escape_js(c.loc('Peering Costs')) %]</li>');
     }
 },{
     res: 'reseller_sum',
     widgetName: "AdminBillingOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.loc('Reseller Revenue') %]</li>');
+        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.escape_js(c.loc('Reseller Revenue')) %]</li>');
     }
 },{
     res: 'customer_sum',
     widgetName: "AdminBillingOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.loc('Customer Revenue') %]</li>');
+        $("#admin_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.escape_js(c.loc('Customer Revenue')) %]</li>');
     }
 },{
     res: 'profiles_count',
@@ -29,7 +29,7 @@ enqueLists.push([{
         $("#admin_billing_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Billing Profile') %]' : '[% c.loc('Billing Profiles') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Billing Profile')) %]' : '[% c.escape_js(c.loc('Billing Profiles')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/admin_peering_overview.tt b/share/templates/widgets/admin_peering_overview.tt
index 49e5b267c6..23e47e74e8 100644
--- a/share/templates/widgets/admin_peering_overview.tt
+++ b/share/templates/widgets/admin_peering_overview.tt
@@ -4,14 +4,14 @@ enqueLists.push([{
     widgetName: "AdminPeeringOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_peering_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Peering Server') %]' : '[% c.loc('Peering Servers') %]') + '</li>');
+        $("#admin_peering_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Peering Server')) %]' : '[% c.escape_js(c.loc('Peering Servers')) %]') + '</li>');
     }
 },{
     res: 'rules_count',
     widgetName: "AdminPeeringOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_peering_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Peering Rule') %]' : '[% c.loc('Peering Rules') %]') + '</li>');
+        $("#admin_peering_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Peering Rule')) %]' : '[% c.escape_js(c.loc('Peering Rules')) %]') + '</li>');
     }
 },{
     res: 'groups_count',
@@ -22,7 +22,7 @@ enqueLists.push([{
         $("#admin_peering_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Peering Group') %]' : '[% c.loc('Peering Groups') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Peering Group')) %]' : '[% c.escape_js(c.loc('Peering Groups')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/admin_reseller_overview.tt b/share/templates/widgets/admin_reseller_overview.tt
index b231f62f44..3d164ac084 100644
--- a/share/templates/widgets/admin_reseller_overview.tt
+++ b/share/templates/widgets/admin_reseller_overview.tt
@@ -4,21 +4,21 @@ enqueLists.push([{
     widgetName: "AdminResellerOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Domain') %]' : '[% c.loc('Domains') %]') + '</li>');
+        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Domain')) %]' : '[% c.escape_js(c.loc('Domains')) %]') + '</li>');
     }
 },{
     res: 'customers_count',
     widgetName: "AdminResellerOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Customer') %]' : '[% c.loc('Customers') %]') + '</li>');
+        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Customer')) %]' : '[% c.escape_js(c.loc('Customers')) %]') + '</li>');
     }
 },{
     res: 'subscribers_count',
     widgetName: "AdminResellerOverview",
     cb: function(data) {
         //console.log(data);
-        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Subscriber') %]' : '[% c.loc('Subscribers') %]') + '</li>');
+        $("#admin_reseller_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Subscriber')) %]' : '[% c.escape_js(c.loc('Subscribers')) %]') + '</li>');
     }
 },{
     res: 'resellers_count',
@@ -29,7 +29,7 @@ enqueLists.push([{
         $("#admin_reseller_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Reseller') %]' : '[% c.loc('Resellers') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Reseller')) %]' : '[% c.escape_js(c.loc('Resellers')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/admin_system_overview.tt b/share/templates/widgets/admin_system_overview.tt
index c2217af335..ced829ebd2 100644
--- a/share/templates/widgets/admin_system_overview.tt
+++ b/share/templates/widgets/admin_system_overview.tt
@@ -15,7 +15,7 @@ enqueLists.push([{
         //console.log(data);
         var txt = data.widget_data.text;
         var col = data.widget_data.color;
-        $("#admin_system_overview_lazy_items_list").append('<li>[% c.loc('System') %] <strong style="color:' + col + '">' + txt + '</strong></li>');
+        $("#admin_system_overview_lazy_items_list").append('<li>[% c.escape_js(c.loc('System')) %] <strong style="color:' + col + '">' + txt + '</strong></li>');
     }
 },{
     res: 'hardware',
@@ -24,7 +24,7 @@ enqueLists.push([{
         //console.log(data);
         var txt = data.widget_data.text;
         var col = data.widget_data.color;
-        $("#admin_system_overview_lazy_items_list").append('<li>[% c.loc('Hardware') %] <strong style="color:' + col + '">' + txt + '</strong></li>');
+        $("#admin_system_overview_lazy_items_list").append('<li>[% c.escape_js(c.loc('Hardware')) %] <strong style="color:' + col + '">' + txt + '</strong></li>');
     }
 },{
     res: 'overall_status',
diff --git a/share/templates/widgets/reseller_billing_overview.tt b/share/templates/widgets/reseller_billing_overview.tt
index b2574fd265..02a741b729 100644
--- a/share/templates/widgets/reseller_billing_overview.tt
+++ b/share/templates/widgets/reseller_billing_overview.tt
@@ -4,14 +4,14 @@ enqueLists.push([{
     widgetName: "ResellerBillingOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.loc('Reseller Cost') %]</li>');
+        $("#reseller_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.escape_js(c.loc('Reseller Cost')) %]</li>');
     }
 },{
     res: 'customer_sum',
     widgetName: "ResellerBillingOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.loc('Customer Revenue') %]</li>');
+        $("#reseller_billing_overview_lazy_items_list").append('<li><strong>' + sprintf('%.02f',data.widget_data / 100.0) + '</strong> [% c.escape_js(c.loc('Customer Revenue')) %]</li>');
     }
 },{
     res: 'profiles_count',
@@ -22,7 +22,7 @@ enqueLists.push([{
         $("#reseller_billing_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Billing Profile') %]' : '[% c.loc('Billing Profiles') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Billing Profile')) %]' : '[% c.escape_js(c.loc('Billing Profiles')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/reseller_customer_overview.tt b/share/templates/widgets/reseller_customer_overview.tt
index 670edf29c2..3cc6358d7b 100644
--- a/share/templates/widgets/reseller_customer_overview.tt
+++ b/share/templates/widgets/reseller_customer_overview.tt
@@ -4,14 +4,14 @@ enqueLists.push([{
     widgetName: "ResellerCustomerOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_customer_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Contact') %]' : '[% c.loc('Contacts') %]') + '</li>');
+        $("#reseller_customer_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Contact')) %]' : '[% c.escape_js(c.loc('Contacts')) %]') + '</li>');
     }
 },{
     res: 'subscribers_count',
     widgetName: "ResellerCustomerOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_customer_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Subscriber') %]' : '[% c.loc('Subscribers') %]') + '</li>');
+        $("#reseller_customer_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Subscriber')) %]' : '[% c.escape_js(c.loc('Subscribers')) %]') + '</li>');
     }
 },{
     res: 'customers_count',
@@ -22,7 +22,7 @@ enqueLists.push([{
         $("#reseller_customer_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Customer') %]' : '[% c.loc('Customers') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Customer')) %]' : '[% c.escape_js(c.loc('Customers')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/reseller_domain_overview.tt b/share/templates/widgets/reseller_domain_overview.tt
index 8a6dfaec15..65bf2fb273 100644
--- a/share/templates/widgets/reseller_domain_overview.tt
+++ b/share/templates/widgets/reseller_domain_overview.tt
@@ -4,14 +4,14 @@ enqueLists.push([{
     widgetName: "ResellerDomainOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_domain_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Rewrite Rule Set') %]' : '[% c.loc('Rewrite Rule Sets') %]') + '</li>');
+        $("#reseller_domain_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Rewrite Rule Set')) %]' : '[% c.escape_js(c.loc('Rewrite Rule Sets')) %]') + '</li>');
     }
 },{
     res: 'sound_sets_count',
     widgetName: "ResellerDomainOverview",
     cb: function(data) {
         //console.log(data);
-        $("#reseller_domain_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.loc('Sound Set') %]' : '[% c.loc('Sound Sets') %]') + '</li>');
+        $("#reseller_domain_overview_lazy_items_list").append('<li><strong>' + data.widget_data + '</strong> ' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Sound Set')) %]' : '[% c.escape_js(c.loc('Sound Sets')) %]') + '</li>');
     }
 },{
     res: 'domains_count',
@@ -22,7 +22,7 @@ enqueLists.push([{
         $("#reseller_domain_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Domain') %]' : '[% c.loc('Domains') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Domain')) %]' : '[% c.escape_js(c.loc('Domains')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/subscriber_calls_overview.tt b/share/templates/widgets/subscriber_calls_overview.tt
index bc223c671f..35cfdfa1ef 100644
--- a/share/templates/widgets/subscriber_calls_overview.tt
+++ b/share/templates/widgets/subscriber_calls_overview.tt
@@ -6,7 +6,7 @@ enqueLists.push([{
         //console.log(data);
         var calls = data.widget_data;
         if (calls.length == 0) {
-            $("#subscriber_call_overview_lazy_items_list").append('<li>[% c.loc('No calls yet') %]</li>');
+            $("#subscriber_call_overview_lazy_items_list").append('<li>[% c.escape_js(c.loc('No calls yet')) %]</li>');
         } else {
             for (var i = 0; i < calls.length; i++) {
                 var call = calls[i];
@@ -47,7 +47,7 @@ enqueLists.push([{
         $("#subscriber_call_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Recent Call') %]' : '[% c.loc('Recent Calls') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Recent Call')) %]' : '[% c.escape_js(c.loc('Recent Calls')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/subscriber_cf_overview.tt b/share/templates/widgets/subscriber_cf_overview.tt
index c0f4353f02..8103f00a3a 100644
--- a/share/templates/widgets/subscriber_cf_overview.tt
+++ b/share/templates/widgets/subscriber_cf_overview.tt
@@ -11,9 +11,9 @@ enqueLists.push([{
             $("#subscriber_cf_overview_lazy_items_list").append('<li>' +
                 cf_mappings.desc + ' <strong style="color:' +
                 (cf_mappings.mappings.length > 0 ?
-                    'green">[% c.loc('active') %]'
+                    'green">[% c.escape_js(c.loc('active')) %]'
                 :
-                    'grey">[% c.loc('inactive') %]'
+                    'grey">[% c.escape_js(c.loc('inactive')) %]'
                 ) + '</strong>' +
                 '</li>');
             mcount += cf_mappings.mappings.length;
@@ -22,7 +22,7 @@ enqueLists.push([{
         $("#subscriber_cf_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + mcount + '</span>' +
-                '<span class="term">' + (mcount == 1 ? '[% c.loc('Call Forward Configured') %]' : '[% c.loc('Call Forwards Configured') %]') + '</span>' +
+                '<span class="term">' + (mcount == 1 ? '[% c.escape_js(c.loc('Call Forward Configured')) %]' : '[% c.escape_js(c.loc('Call Forwards Configured')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/subscriber_reg_overview.tt b/share/templates/widgets/subscriber_reg_overview.tt
index 7ad495f8eb..84a9647ded 100644
--- a/share/templates/widgets/subscriber_reg_overview.tt
+++ b/share/templates/widgets/subscriber_reg_overview.tt
@@ -6,7 +6,7 @@ enqueLists.push([{
         //console.log(data);
         var registrations = data.widget_data;
         if (registrations.length == 0) {
-            $("#subscriber_registration_overview_lazy_items_list").append('<li>[% c.loc('No devices registered') %]</li>');
+            $("#subscriber_registration_overview_lazy_items_list").append('<li>[% c.escape_js(c.loc('No devices registered')) %]</li>');
         } else {
             for (var i = 0; i < registrations.length; i++) {
                 var registration = registrations[i];
@@ -31,7 +31,7 @@ enqueLists.push([{
         $("#subscriber_registration_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('Registered Device') %]' : '[% c.loc('Registered Devices') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('Registered Device')) %]' : '[% c.escape_js(c.loc('Registered Devices')) %]') + '</span>' +
             '</div>');
     }
 }]);
diff --git a/share/templates/widgets/subscriber_vm_overview.tt b/share/templates/widgets/subscriber_vm_overview.tt
index 67bcc3bf25..3c28094965 100644
--- a/share/templates/widgets/subscriber_vm_overview.tt
+++ b/share/templates/widgets/subscriber_vm_overview.tt
@@ -6,7 +6,7 @@ enqueLists.push([{
         //console.log(data);
         var voicemails = data.widget_data;
         if (voicemails.length == 0) {
-            $("#subscriber_voicemail_overview_lazy_items_list").append('<li>[% c.loc('No new messages') %]</li>');
+            $("#subscriber_voicemail_overview_lazy_items_list").append('<li>[% c.escape_js(c.loc('No new messages')) %]</li>');
         } else {
             for (var i = 0; i < voicemails.length; i++) {
                 var voicemail = voicemails[i];
@@ -36,7 +36,7 @@ enqueLists.push([{
         $("#subscriber_voicemail_overview_lazy_items_header").append(
             '<div class="plan-price">' +
                 '<span>' + data.widget_data + '</span>' +
-                '<span class="term">' + (data.widget_data == 1 ? '[% c.loc('New Message') %]' : '[% c.loc('New Messages') %]') + '</span>' +
+                '<span class="term">' + (data.widget_data == 1 ? '[% c.escape_js(c.loc('New Message')) %]' : '[% c.escape_js(c.loc('New Messages')) %]') + '</span>' +
             '</div>');
     }
 }]);