Fix #379 Blooog Theme XSS CVE & references