CVE-2019-20434: Reflected XSS in WSO2 API Manager 2.6.0