XSS vulnerability in webbinterface fixed