Version 4.1.2

system/Member/Group.php

@@ -241,7 +241,7 @@ class _Group extends \IPS\Patterns\ActiveRecord
 	 */
 	public function formatName( $name )
 	{
-		return ( $this->prefix . htmlentities( $name, \IPS\HTMLENTITIES, 'UTF-8', FALSE ) . $this->suffix );
+		return ( $this->prefix . htmlspecialchars( $name, \IPS\HTMLENTITIES, 'UTF-8', FALSE ) . $this->suffix );
 	}
 
 	/**