Acknowledged by Concrete5

For reporting many XSS issues and many full path I got listed in their release notes.  https://www.concrete5.org/documentation/background/version_history/5-6-3-release-notes/