diff --git a/src/Security/Security.php b/src/Security/Security.php
index 2e7c4de5c..a5205fcb1 100644
--- a/src/Security/Security.php
+++ b/src/Security/Security.php
@@ -939,6 +939,8 @@ class Security extends Controller implements TemplateGlobalProvider
         // We've displayed the message in the form output, so reset it for the next run.
         static::clearSessionMessage();
 
+        // Ensure title is present - in case getResponseController() didn't return a page controller
+        $fragments = array_merge($fragments, ['Title' => $title]);
         if ($message) {
             $messageResult = [
                 'Content'     => DBField::create_field('HTMLFragment', $message),