Fixed issue #7966: XSS vulnerability when adding a user group