LPS-39827 XSS vulnerability