Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped 1 Stored XSS into onclick event with angle brackets and double quotes HTML-encoded and single quotes and backslash escaped 17/01/2025