SSF-21 XSS vulnerability on Measures page