🚨 CVE-2025-59715
SMSEagle before 6.11 allows reflected XSS via a username or contact phone number.