diff --git a/admin/framework/composer.json b/admin/framework/composer.json
index 44b42109f824..7b03d9886bf7 100644
--- a/admin/framework/composer.json
+++ b/admin/framework/composer.json
@@ -13,7 +13,7 @@
         "php": "^8.2",
         "ext-intl": "*",
         "ext-mbstring": "*",
-        "laminas/laminas-escaper": "^2.17",
+        "laminas/laminas-escaper": "^2.18",
         "psr/log": "^3.0"
     },
     "require-dev": {
diff --git a/composer.json b/composer.json
index e244e9e7b6a1..2597bfdb33c0 100644
--- a/composer.json
+++ b/composer.json
@@ -13,7 +13,7 @@
         "php": "^8.2",
         "ext-intl": "*",
         "ext-mbstring": "*",
-        "laminas/laminas-escaper": "^2.17",
+        "laminas/laminas-escaper": "^2.18",
         "psr/log": "^3.0"
     },
     "require-dev": {
diff --git a/system/ThirdParty/Escaper/Escaper.php b/system/ThirdParty/Escaper/Escaper.php
index 39d9b0b1cdac..25119a0e5158 100644
--- a/system/ThirdParty/Escaper/Escaper.php
+++ b/system/ThirdParty/Escaper/Escaper.php
@@ -247,7 +247,7 @@ public function escapeCss(string $string)
     protected function htmlAttrMatcher($matches)
     {
         $chr = $matches[0];
-        $ord = ord($chr);
+        $ord = ord($chr[0]);
 
         /**
          * The following replaces characters undefined in HTML with the