Thanks for report.

How do you imagine we should fix this?
We cannot know what will the parameter look like hence we assume the basic one is present.
Looking for any parameter which end with "cid" is just too risky as you introduce false positives.