https://allelesecurity.com/asa-2019-00200/
ASA-2019-00200 - Magento: Stored Cross-Site Scripting (XSS) in the Admin Catalog configuration section