Added a remote code excecution vulnerability for snyk-demo-todo_goof

[realSchoki]

Hello there, this is the remote code excecution i have found while sitting in your workshop ;)

Maybe you have to make it a bit prettier and give it a bit of a nice description :).