https://deepquest.code511.com/blog/2017/06/blackcat-cms-1-2-cross-site-scripting/