if your website has an XSS its definitely not secure.
passwords should not be used for authentication past login
i fixed all xss
that’s what they all say