Unjected 2: Electric Boogaloo

Where do I even begin with this one... In 2022, I accidentally discovered an insecure admin panel for a dating site for anti-vaxxers and bodily fluid marketplace named Unjected giving me access to all user data among other things. A few months ago, I decided to revisit it, after seeing them make snarky posts on Twitter. They re-wrote the website in React (for the frontend) and Express (for the…