Silverstripe Framework: Possible XSS attack through media embed

Impact The "Insert media from web" functionality in the CMS is vulnerable to XSS from a specially crafted embed. Reported by Jack Wallace from Bastion Security...