diff --git a/code/MemberTableField.php b/code/MemberTableField.php
index <HASH>..<HASH> 100755
--- a/code/MemberTableField.php
+++ b/code/MemberTableField.php
@@ -349,7 +349,7 @@ class MemberTableField extends ComplexTableField {
 		$message = sprintf(
 			_t('ComplexTableField.SUCCESSADD', 'Added %s %s %s'),
 			$childData->singular_name(),
-			'<a href="' . $this->Link() . '">' . $childData->Title . '</a>',
+			'<a href="' . $this->Link() . '">' . htmlspecialchars($childData->Title, ENT_QUOTES) . '</a>',
 			$closeLink
 		);
 		$form->sessionMessage($message, 'good');
BUGFIX: Removed XSS holes (from r<I>) (from r<I>)

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/cms/trunk@<I> <I>b<I>ca-7a2a-<I>-9d3b-<I>d<I>a<I>a9