XSS in Desktop Client via user status and information