CVE-2019-20435: Reflected XSS in WSO2 API Manager 2.6.0