Fixed issue: XSS reflection in CPDB and global settings