Zero-Day: Hijacking iCloud Credentials with Apple Airtags (Stored XSS)

Hopefully they reported this to Apple before publishing this...

EDIT: Spelling