Àmì Plugin: cross-site scripting