thumbnail Joomla: PHP Bug Introduces Multiple XSS Vulnerabilities