From efa041aeeb4b1a99acd48aaa05584993c926d1ed Mon Sep 17 00:00:00 2001
From: Dan Harrin <git@danharrin.com>
Date: Sat, 14 Mar 2026 07:33:11 +0000
Subject: [PATCH] fix: Escaping range and values summarizer state (#19502)

---
 packages/tables/src/Columns/Summarizers/Range.php  | 4 ++--
 packages/tables/src/Columns/Summarizers/Values.php | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/packages/tables/src/Columns/Summarizers/Range.php b/packages/tables/src/Columns/Summarizers/Range.php
index a09158710c..1fa4440f12 100644
--- a/packages/tables/src/Columns/Summarizers/Range.php
+++ b/packages/tables/src/Columns/Summarizers/Range.php
@@ -155,11 +155,11 @@ class Range extends Summarizer
 
             <?php if (filled($from) || filled($to)) { ?>
                 <span>
-                    <?= $from ?>
+                    <?= e($from) ?>
 
                     <?= (filled($from) && filled($to)) ? '-' : '' ?>
 
-                    <?= $to ?>
+                    <?= e($to) ?>
                 </span>
             <?php } ?>
         </div>
diff --git a/packages/tables/src/Columns/Summarizers/Values.php b/packages/tables/src/Columns/Summarizers/Values.php
index 094684e156..ca6b29a6b0 100644
--- a/packages/tables/src/Columns/Summarizers/Values.php
+++ b/packages/tables/src/Columns/Summarizers/Values.php
@@ -47,7 +47,7 @@ class Values extends Summarizer
                 <ul <?= $this->isBulleted() ? 'class="fi-bulleted"' : '' ?>>
                     <?php foreach ($state as $stateItem) { ?>
                         <li>
-                            <?= $this->formatState($stateItem) ?>
+                            <?= e($this->formatState($stateItem)) ?>
                         </li>
                     <?php } ?>
                 </ul>