https://allelesecurity.com.br/asa-2018-00078/
ASA-2018-00078 - TYPO3: Cross-Site Scripting no CKEditor usando tag img