XWIKI-8592: XSS in the user profile