diff --git a/src/lib/routes/admin-api/email.ts b/src/lib/routes/admin-api/email.ts
index a58458664e..06e8275f48 100644
--- a/src/lib/routes/admin-api/email.ts
+++ b/src/lib/routes/admin-api/email.ts
@@ -41,7 +41,7 @@ export default class EmailController extends Controller {
         const { template } = req.params;
         const ctx = req.query;
         const data = await this.emailService.compileTemplate(
-            template,
+            sanitize(template),
             TemplateFormat.PLAIN,
             ctx,
         );