Cross-Site Scripting (XSS)

silverstripe/framework is susceptible to cross-site scripting XSS attacks. The attacks are possible because it does not escape the backURL parameter in CMSSecurity.php...