9711 XSS vuln

Adding htmlentities to the template replacement for the current URI
9711 XSS vuln

Adding htmlentities to message display in case of a possible wrong language
9712 XSS vuln
9713 Hardly exploitable LFI vuln
9714 Possibly email-injection vuln

Added proper filter to validate filter