Security update: Fixed XSS vulnerability