diff --git a/templates/order/order-details.php b/templates/order/order-details.php
index a1de4e13790..5173f735a50 100644
--- a/templates/order/order-details.php
+++ b/templates/order/order-details.php
@@ -74,7 +74,7 @@ $order = wc_get_order( $order_id );
 				if ( $order->has_status( array( 'completed', 'processing' ) ) && ( $purchase_note = get_post_meta( $_product->id, '_purchase_note', true ) ) ) {
 					?>
 					<tr class="product-purchase-note">
-						<td colspan="3"><?php echo wpautop( do_shortcode( $purchase_note ) ); ?></td>
+						<td colspan="3"><?php echo wpautop( do_shortcode( wp_kses_post( $purchase_note ) ) ); ?></td>
 					</tr>
 					<?php
 				}