admin-takeover 1 Stored Cross-Site Scripting (XSS) Leads to Administrative Session Hijacking | PortWart Jun 10, 2026