https://www.haktuts.in/2015/09/another-stored-xss-vulnerability-found-in-paypal.html