FMC-495 FMC susceptible to cross site scripting issues