ghost xss 1 Ghost Publishing Platform – SVG Image Upload to Stored Cross-site scripting Sep 20, 2018