stageshow

This is a browser-based screenshot and layout-verification tool. The main security issue is a potential HTML injection in the contact-sheet page: page-controlled data-mark values are inserted unescaped into HTML and may execute script in the browser context when capturing a hostile page; severity is moderate and the issue is not evidence of intentional malware. No suspicious domains, IPs, or credential targets are present in the code.