owasp-2025 5 Reflected XSS via Attribute Injection | Echoed Jul 24, 2026 Weak OTP Verification Leads to Account Takeover | Comical Jul 17, 2026 Command Injection through EXIF Metadata Processing | PhotoStore Jun 28, 2026 SVG XXE Leads to Local File Disclosure | Educated Jun 26, 2026 Insecure Deserialization Leads to Dealer Portal Access | Scooot Jun 25, 2026