diff --git a/src/wp-admin/themes.php b/src/wp-admin/themes.php
index ba897614db..14e6892f88 100644
--- a/src/wp-admin/themes.php
+++ b/src/wp-admin/themes.php
@@ -270,7 +270,7 @@ if ( ! validate_current_theme() || isset( $_GET['broken'] ) ) {
 		<?php
 	} else {
 		?>
-		<div id="message2" class="updated notice is-dismissible"><p><?php _e( 'New theme activated.' ); ?> <a href="<?php echo home_url( '/' ); ?>"><?php _e( 'Visit site' ); ?></a></p></div>
+		<div id="message2" class="updated notice is-dismissible"><p><?php _e( 'New theme activated.' ); ?> <a href="<?php echo esc_url( home_url( '/' ) ); ?>"><?php _e( 'Visit site' ); ?></a></p></div>
 		<?php
 	}
 } elseif ( isset( $_GET['deleted'] ) ) {