ZeroSSL: XSS to session hijacking, stealing a private key (and password hash) | Heykuki News