TopList before 2019-09-03 allows XSS via a title.Referenceshttps://github.com/tophubs/TopList/issues/32