webapp-fire (Vulnerable Flask app) Mini vulnerable Flask app for training and PoC capture. Contains: SQL injection (login) Stored XSS (comments) See report.md for testing notes and PoC commands.