https://deepquest.code511.com/blog/2018/04/webapps-monstra-cms-3-0-4-persitent-cross-site-scripting/