javascript 2 Cross-Site Scripting (XSS) – Reflected Search Injection | Ember Kettle May 28, 2026 Information Disclosure – Client-Side Analytics Exposure | Pebble & Pine May 28, 2026