Issue #2140459 by amateescu, larowlan, David_Rothstein: Color module XSS in appearance settings.