Stored Cross-Site Scripting Explained