https://devl00p.github.io/posts/XSS-dans-le-plugin-Wordpress-JP-Theme-Switcher-Bar/