XSS 4 PortSwigger: Stored DOM XSS Sep 1, 2026 PortSwigger: DOM XSS via document.write Inside a select Element Aug 30, 2026 PortSwigger: Stored XSS into Anchor href Attribute with Double Quotes HTML-Encoded Aug 29, 2026 PortSwigger: Reflected XSS into a JavaScript String with Angle Brackets HTML Encoded Aug 28, 2026