[SECURITY] XSS in beuser VH