endpoint-enumeration 1 Stored XSS – Internal Endpoint Enumeration Through Comment Injection | Crate & Sleeve May 18, 2026