XSS and Argument Injection Vulnerabilities Discovered in Etherpad Collaboration Tool