XSS vulnerability fixed and new version