Index: wp-admin/includes/class-wp-list-table.php
===================================================================
--- wp-admin/includes/class-wp-list-table.php	(revision 17469)
+++ wp-admin/includes/class-wp-list-table.php	(working copy)
@@ -420,12 +420,13 @@
 		if ( $pending_comments )
 			echo '<strong>';
 
-		$link = "<a href='" . add_query_arg( 'p', $post_id, admin_url('edit-comments.php') ) . "' title='$pending_phrase' class='post-com-count'><span class='comment-count'>%s</span></a>";
+		$link = "<a href='%s' title='" . esc_attr( $pending_phrase ) . "' class='post-com-count'><span class='comment-count'>%s</span></a>";
+		$url = add_query_arg( 'p', $post_id, admin_url( 'edit-comments.php' ) );
 
 		comments_number(
-			sprintf( $link, /* translators: comment count link */ _x( '0', 'comment count' ) ),
-			sprintf( $link, /* translators: comment count link */ _x( '1', 'comment count' ) ),
-			sprintf( $link, /* translators: comment count link: % will be substituted by comment count */ _x( '%', 'comment count' ) )
+			sprintf( $link, $url, /* translators: comment count link */ _x( '0', 'comment count' ) ),
+			sprintf( $link, $url, /* translators: comment count link */ _x( '1', 'comment count' ) ),
+			sprintf( $link, $url, /* translators: comment count link: % will be substituted by comment count */ _x( '%', 'comment count' ) )
 		);
 
 		if ( $pending_comments )