https://www.infinity8labs.com/advisories/Infinity8 Labs Advisorieshttps://www.infinity8labs.com/advisories/I8L-2026-0001/https://www.infinity8labs.com/advisories/I8L-2026-0001/Wed, 14 Oct 2026 12:00:00 GMTAn authenticated low-privilege user can store a script payload that executes in an administrator's browser when they view the record.