Stored-XSS with CSP-bypass via labels’ color