https://addictivehackers.blogspot.com/2015/07/stored-xss-in-kinjacom-notification.html