1. Critical XSS Vulnerability in Overlay Leaderboard Allows Script Injection via Twitch Chat Input
A critical cross-site scripting (XSS) vulnerability has been identified in the overlay leaderboard component (`overlay/static/index.html`), potentially allowing malicious actors to inject arbitrary HTML or JavaScript code into the rendered page. The flaw stems from direct injection of user-supplied data—specifically `e...