[SECURITY] XSS in (old) extension manager information function