diff --git a/plugin/src/Accounts/Admin.php b/plugin/src/Accounts/Admin.php
index 349084b..1dea894 100644
--- a/plugin/src/Accounts/Admin.php
+++ b/plugin/src/Accounts/Admin.php
@@ -44,14 +44,14 @@ public function TokenFieldContent( \WP_Post $post ) {
 		?>
 		<h2><?php _e( 'Zadejte 64 znakový token z internetového bankovnictví', 'fio-bank-transactions' ); ?>:</h2>
 		<input type="text" name="<?php echo FIOTRANSACTIONS_NAME . '_token'; ?>"
-		       value="<?php echo get_post_meta( $post->ID, FIOTRANSACTIONS_NAME . '_token', true ); ?>"
+		       value="<?php echo esc_attr( get_post_meta( $post->ID, FIOTRANSACTIONS_NAME . '_token', true ) ); ?>"
 		       placeholder="<?php _e( 'token', 'fio-bank-transactions' ); ?>"
 		       class="regular-text"
 		       style="width: 100%;"
 		       pattern="[a-zA-Z0-9]{64}"
 		       required="required"/>
 		<p><a href="http://napoveda.fapi.cz/article/144-jak-vygenerovat-token-ve-fio-bance"
-		        target="_blank"><?php _e( 'Jak získám token?', 'fio-bank-transactions' ); ?></a></p>
+		      target="_blank"><?php _e( 'Jak získám token?', 'fio-bank-transactions' ); ?></a></p>
 		<?php
 	}
 
diff --git a/plugin/src/Accounts/Columns.php b/plugin/src/Accounts/Columns.php
index b3d7e82..856d48d 100644
--- a/plugin/src/Accounts/Columns.php
+++ b/plugin/src/Accounts/Columns.php
@@ -46,9 +46,9 @@ public function lastModifiedAdminColumnContent( string $columnName, int $postId
 		$modifiedDate   = sprintf( _x( 'Před %s', '%s = human-readable time difference', 'fio-bank-transactions' ), human_time_diff( strtotime( $post->post_modified ), current_time( 'timestamp' ) ) );
 		$modifiedAuthor = get_the_modified_author();
 
-		echo $modifiedDate;
+		echo esc_html( $modifiedDate );
 		echo '<br>';
-		echo '<strong>' . $modifiedAuthor . '</strong>';
+		echo '<strong>' . esc_html( $modifiedAuthor ) . '</strong>';
 
 	}