SafetyCulture 1-Click Admin ATO

postMessage eval() DOM XSS in player.html → Full Administrator Escalation via Invite Link