LPS-35013 xss vulnerability