LPS-50319 XSS in Announcements portlet