LPS-32529 XSS with categories