I wonder how this got so much points.. Reflected XSS in 2014, yeah..