also yes im Ashime <3 MonitorsPlus.js this line: " const Vvalue = util.target.lookupOrCreateVariable(nameID, variableName).value; " LN: 517 Vvalue is not sanitized when passed into an HTML input I exploited the text input option. " <input type="text" id="text_${variableId}" class="monitor_slider_1CHwk no-drag" value="${Vvalue}"> " LN: 552