Bug 19086 Stored XSS in subscription-add.pl