Aug 7, 2026Aug 7, 2026 · 13 min read · 27 viewsOne Click, No File: Upload XSS Without the UploadHow multipart/form-data turns "the victim has to pick a file" into a single link13 min read · 27 views