Security: XSS can be injected in the group edit view

Don't need the loop. Just `$subsiteMap = Convert::raw2xml($subsiteMap);`