CVE-2019-20439: Reflected XSS in WSO2 API Manager 2.6.0