Stored Cross-Site Scripting 1 Stored XSS – Internal Endpoint Enumeration Through Comment Injection | Crate & Sleeve May 18, 2026