tugcantopaloglu openclaw-dashboard

• CVE-2026-66421 Critical 9.3 OpenClaw Dashboard Stored XSS via lastMessage Session Field 0.6%
• CVE-2026-66418 Critical 9.3 OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field 0.6%