From Privilege Escalation to RCE in Wiki.jsA tale of privilege escalation, command injection, and the humbling art of responsible disclosureMay 21, 2026·11 min read