CVE-2019-20440: Reflected XSS in WSO2 API Manager 2.6.0