File upload XSS – Vulnerabilities