diff --git a/django/core/formfields.py b/django/core/formfields.py
index 1d018aff5c..3289be5235 100644
--- a/django/core/formfields.py
+++ b/django/core/formfields.py
@@ -427,7 +427,7 @@ class SelectField(FormField):
selected_html = ''
if str(value) == str_data:
selected_html = ' selected="selected"'
- output.append(' ' % (escape(value), selected_html, display_name))
+ output.append(' ' % (escape(value), selected_html, escape(display_name)))
output.append(' ')
return '\n'.join(output)