CVE-2026-0540: How a CTF Detour Led Us to a DOMPurify mXSS - Daft

A detailed write-up of the DOMPurify mXSS we found during a CTF detour, affecting 3.1.3 through 3.3.1 and fixed through a small patch series in 3.3.2.