Cross-Site Scripting 2 Stored XSS Leads to Admin Cookie Exfiltration | Crate & Sleeve Jun 20, 2026 Stored XSS and JSONP Callback Injection Leads to Admin Session Theft | PhoneVault Jun 19, 2026