Mimazhan

The issue allows for XSS via the `content` parameter in the "index.php?app=article&ac=comment&ts=do" endpoint.

The issue allows for XSS via the `index.php?app=group&ac=create&ts=do` endpoint, specifically through the `groupdesc` parameter.