bug-bounty 2 Intigriti 0626: Leaking Admin Private Notes with Reflected HTML Injection and XS-Leak Jun 22, 2026 Intigriti 0526: Stored XSS via DOM Clobbering in the Testimonial Feed May 27, 2026