Ref #400 cve for nokia-mapsplaces XSS