XSS vulnerability in Pier-Blog