LPS-43441 XSS vulnerability