I'm working on some Reflected Cross-site scripting (XSS) vulnerabilities on our site (php, html,..