xss 2 DOM-based XSS in Cốc Cốc Dictionary & Translate Extension — Via Unsanitized Text Selection Mar 3, 2026 Wormable Stored XSS in Genspark AI Chat — Via Unsanitized AI Output Mar 3, 2026