XSS vulnerability should be fixed.