Stored XSS into anchor href attribute with double quotes HTML-encoded 1 Stored XSS into anchor href attribute with double quotes HTML-encoded Jan 6, 2025