vendor xyz Xyz Web Application Vulnerabilities