https://jcdematos.com/tags/xss/ Recent content in XSS on Jc de Matos Hugo en Sun, 04 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/easynotes/ Sun, 04 Oct 2026 00:00:00 +0000 https://jcdematos.com/writeups/easynotes/ IDOR and stored XSS in a notes app via predictable MD5 note IDs, pivoting through a leaked admin credential and an unrestricted file upload for RCE, then root via a world-writable cron backup script.