https://www.aoicyber.eu.org/2018/10/vuln-plugin-tinymce-insert-file-upload.html