SharePoint escalation privilege through Stored XSS