“From Open Redirect to JavaScript Execution via CVE-2024-4367”, JISKa, vol. 11, no. 3, pp. 427–437, Sep. 2026, doi: 10.14421/jiska.6353.