https://deepquest.code511.com/blog/2017/01/hassium-cms-0-10-cross-site-scripting/