Demonstrated XSS and RCE via server-side prototype pollution in Node.js apps using EJS and Express, without modifying server code. - View it on GitHub