diff --git src/wp-includes/ms-deprecated.php src/wp-includes/ms-deprecated.php
index 5a6b4415ed..e8a9891c74 100644
--- src/wp-includes/ms-deprecated.php
+++ src/wp-includes/ms-deprecated.php
@@ -296,7 +296,7 @@ function wpmu_admin_do_redirect( $url = '' ) {
 		wp_die( __( 'A variable mismatch has been detected.' ), __( 'Sorry, you are not allowed to view this item.' ), 400 );
 	} elseif ( isset( $_GET['redirect'] ) ) {
 		if ( str_starts_with( $_GET['redirect'], 's_' ) )
-			$url .= '&action=blogs&s='. esc_html( substr( $_GET['redirect'], 2 ) );
+			$url .= '&action=blogs&s='. esc_attr( substr( $_GET['redirect'], 2 ) );
 	} elseif ( isset( $_POST['redirect'] ) ) {
 		$url = wpmu_admin_redirect_add_updated_param( $_POST['redirect'] );
 	}