cwe-79 - cross-site scripting News Articles