Added XSS category and Nextend exploit, returning exploit url on success