Index: openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/xowiki-procs.tcl,v
diff -u -r1.542.2.113 -r1.542.2.114
--- openacs-4/packages/xowiki/tcl/xowiki-procs.tcl	16 Oct 2021 14:45:40 -0000	1.542.2.113
+++ openacs-4/packages/xowiki/tcl/xowiki-procs.tcl	19 Oct 2021 08:19:13 -0000	1.542.2.114
@@ -4308,7 +4308,7 @@
               :msg "ignoring unknown variable $lhs_var in expression"
             }
           } elseif {[llength $rhs]>1} {
-            lappend sql_clause "$lhs_var in ('[join $rhs ',']')"
+            lappend sql_clause "$lhs_var in ([ns_dbquotelist $rhs])"
             # the following statement is only needed, when we rely on tcl-only
             lappend tcl_clause "\[lsearch -exact {$rhs} \[:property $lhs\]\] > -1"
           } else {