...

You can re-run the SQL query, whose results should get shorter after each gadget is fixed.

Uninstall user.jsp

Log out (of whichever user you last became) and back in as yourself.

Finally, uninstall user.jsp, as it represents a cross-site-scripting attack vector to yourself.