Persistent XSS vulnerability in functionalMenuItem form fix