XSS Code/SQL injection in slide HTML