[Cullinan #23] Add SSTI, CSTI and update XSS