Added XSS vulnerbaility