Chandlerchin

An issue was discovered that allows for XSS via the `index.php?app=group&ac=create&ts=do` endpoint, specifically through the `groupname` parameter.