add a post web vulnerability