Discussion about XSS vulnerabilities in the context of his team's recent disclosures of vulnerabilities discovered in the DeskPro remote helpdesk