xss in superalert (tw ext in pr) | ScratchStats