.../backend/Classes/Backend/ToolbarItems/ClearCacheToolbarItem.php      | 2 +-
 typo3/sysext/backend/Classes/Backend/ToolbarItems/HelpToolbarItem.php   | 2 +-
 .../sysext/backend/Classes/Backend/ToolbarItems/ShortcutToolbarItem.php | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/typo3/sysext/backend/Classes/Backend/ToolbarItems/ClearCacheToolbarItem.php b/typo3/sysext/backend/Classes/Backend/ToolbarItems/ClearCacheToolbarItem.php
index da7b405..e07aa0f 100644
--- a/typo3/sysext/backend/Classes/Backend/ToolbarItems/ClearCacheToolbarItem.php
+++ b/typo3/sysext/backend/Classes/Backend/ToolbarItems/ClearCacheToolbarItem.php
@@ -157,7 +157,7 @@ class ClearCacheToolbarItem implements ToolbarItemInterface
             $title = $cacheAction['description'] ?: $cacheAction['title'];
             $result[] = '<li>';
             $result[] = '<a class="dropdown-list-link" href="' . htmlspecialchars($cacheAction['href']) . '" title="' . htmlspecialchars($title) . '">';
-            $result[] = $cacheAction['icon'] . ' ' . htmlspecialchars($cacheAction['title']);
+            $result[] = htmlspecialchars($cacheAction['icon']) . ' ' . htmlspecialchars($cacheAction['title']);
             $result[] = '</a>';
             $result[] = '</li>';
         }
diff --git a/typo3/sysext/backend/Classes/Backend/ToolbarItems/HelpToolbarItem.php b/typo3/sysext/backend/Classes/Backend/ToolbarItems/HelpToolbarItem.php
index bb624a9..116c0ed 100644
--- a/typo3/sysext/backend/Classes/Backend/ToolbarItems/HelpToolbarItem.php
+++ b/typo3/sysext/backend/Classes/Backend/ToolbarItems/HelpToolbarItem.php
@@ -83,7 +83,7 @@ class HelpToolbarItem implements ToolbarItemInterface
         $dropdown[] = '<ul class="dropdown-list">';
         foreach ($this->helpModuleMenu->getChildren() as $module) {
             /** @var BackendModule $module */
-            $moduleIcon = $module->getIcon();
+            $moduleIcon = htmlspecialchars($module->getIcon());
             $dropdown[] ='<li'
                 . ' id="' . htmlspecialchars($module->getName()) . '"'
                 . ' class="typo3-module-menu-item submodule mod-' . htmlspecialchars($module->getName()) . '" '
diff --git a/typo3/sysext/backend/Classes/Backend/ToolbarItems/ShortcutToolbarItem.php b/typo3/sysext/backend/Classes/Backend/ToolbarItems/ShortcutToolbarItem.php
index 349ac27..b832534 100644
--- a/typo3/sysext/backend/Classes/Backend/ToolbarItems/ShortcutToolbarItem.php
+++ b/typo3/sysext/backend/Classes/Backend/ToolbarItems/ShortcutToolbarItem.php
@@ -154,7 +154,7 @@ class ShortcutToolbarItem implements ToolbarItemInterface
             $shortcutMenu[] = '
 				<li class="shortcut" data-shortcutid="' . (int)$shortcut['raw']['uid'] . '">
 					<a class="dropdown-list-link dropdown-link-list-add-editdelete" href="#" onclick="' . htmlspecialchars($shortcut['action']) . ' return false;">' .
-                        $shortcut['icon'] . ' ' .
+                        htmlspecialchars($shortcut['icon']) . ' ' .
                         htmlspecialchars($shortcut['label']) .
                     '</a>
 					' . $editIcon . $deleteIcon . '