diff --git a/src/PaymentAddOn.php b/src/PaymentAddOn.php
index bda360c..2e4ea99 100644
--- a/src/PaymentAddOn.php
+++ b/src/PaymentAddOn.php
@@ -234,9 +234,11 @@ public function get_menu_icon() {
 
 		if ( ! \is_readable( $file ) ) {
 			throw new \Exception(
-				\sprintf(
-					'Could not read WordPress admin menu icon from file: %s.',
-					$file
+				\esc_html(
+					\sprintf(
+						'Could not read WordPress admin menu icon from file: %s.',
+						$file
+					) 
 				)
 			);
 		}
@@ -245,9 +247,11 @@ public function get_menu_icon() {
 
 		if ( false === $svg ) {
 			throw new \Exception(
-				\sprintf(
-					'Could not read WordPress admin menu icon from file: %s.',
-					$file
+				\esc_html(
+					\sprintf(
+						'Could not read WordPress admin menu icon from file: %s.',
+						$file
+					) 
 				)
 			);
 		}