diff --git a/BTCPayServer/wwwroot/cart/js/cart.jquery.js b/BTCPayServer/wwwroot/cart/js/cart.jquery.js
index ed9f8705f..0eeeb6411 100644
--- a/BTCPayServer/wwwroot/cart/js/cart.jquery.js
+++ b/BTCPayServer/wwwroot/cart/js/cart.jquery.js
@@ -94,7 +94,7 @@ $(document).ready(function(){
         $('#js-pos-list').find(".card-wrapper").show();
 
         if (str.length > 1) {
-            var $list = $('#js-pos-list').find(".card-title:not(:icontains('" + str + "'))");
+            var $list = $('#js-pos-list').find(".card-title:not(:icontains('" + $.escapeSelector(str) + "'))");
             $list.parents('.card-wrapper').hide();
             $('.js-search-reset').show();
         }
@@ -133,4 +133,4 @@ $(document).ready(function(){
             $tip.trigger('input');
         });
     });
-});
\ No newline at end of file
+});