Fixed annoying typo that shows up in validation screenshots

This change is extremely minor, but it's annoying to show a "CCS" vulnerability to a client, and then in the validation screenshot it says "CSS". I have been forgetting to submit this for months, but finally got to it.