Explore real-world XSS escalation and impact beyond alert(1), including privilege escalation, account takeover scenarios, OAuth abuse, and practical methods