diff --git a/plugin/CloneSite/cloneClient.json.php b/plugin/CloneSite/cloneClient.json.php
index bbcfac96eafa..dba8876f865d 100644
--- a/plugin/CloneSite/cloneClient.json.php
+++ b/plugin/CloneSite/cloneClient.json.php
@@ -94,6 +94,7 @@
 $json->sqlFile = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->sqlFile));
 $json->videoFiles = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->videoFiles));
 $json->photoFiles = escapeshellarg(preg_replace('/[^a-z0-9_.-]/i', '', $json->photoFiles));
+$objClone->cloneSiteURL = escapeshellarg($objClone->cloneSiteURL);
 
 // get dump file
 $cmd = "wget -O {$clonesDir}{$json->sqlFile} {$objClone->cloneSiteURL}videos/cache/clones/{$json->sqlFile}";