https://blog.hawktesters.com/zero-day-alert-scriptcase-vulnerabilities-xss/