Issue 6611 stored xss in cms account information