SilverStripe CMS versions 3.5.3 and below suffer from a persistent cross site scripting vulnerability.