diff --git a/src/libslic3r/Format/bbs_3mf.cpp b/src/libslic3r/Format/bbs_3mf.cpp
index bbd18a0be..6e756370a 100644
--- a/src/libslic3r/Format/bbs_3mf.cpp
+++ b/src/libslic3r/Format/bbs_3mf.cpp
@@ -5896,20 +5896,20 @@ void PlateData::parse_filament_info(GCodeProcessorResult *result)
                            << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
                 } else {
                     std::string thumbnail_file_str = (boost::format("Metadata/plate_%1%.png") % (export_plate_idx + 1)).str();
-                    stream << " <Relationship Target=\"/" << thumbnail_file_str
+                    stream << " <Relationship Target=\"/" << xml_escape(thumbnail_file_str)
                         << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
                 }
             } else {
-                stream << " <Relationship Target=\"/" << data._3mf_thumbnail
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_thumbnail)
                        << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
             }
 
             if (!data._3mf_printer_thumbnail_middle.empty()) {
-                stream << " <Relationship Target=\"/" << data._3mf_printer_thumbnail_middle
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_printer_thumbnail_middle)
                        << "\" Id=\"rel-4\" Type=\"http://schemas.bambulab.com/package/2021/cover-thumbnail-middle\"/>\n";
             }
             if (!data._3mf_printer_thumbnail_small.empty())
-                stream << " <Relationship Target=\"/" << data._3mf_printer_thumbnail_small
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_printer_thumbnail_small)
                        << "\" Id=\"rel-5\" Type=\"http://schemas.bambulab.com/package/2021/cover-thumbnail-small\"/>\n";
         }
         else if (targets.empty()) {