• V12 @v12sec · Twitter · 2026-09-08 14:00 UTC Stored XSS in Forgejo, leading to full control over a victim's account: