Case Study: Responsible Disclosure of a Critical Reflected XSS and Account Takeover Vulnerability30 May 2026