https://allelesecurity.com/asa-2019-00192/
ASA-2019-00192 - Magento: Stored Cross-Site Scripting (XSS) in the admin panel via the Terms & Conditions