"enabled" XSS for feedback entries