GHSA-28fw-88hq-6jmm: Persistent XSS in shopping worlds · Watchpost