CVE-2026-39935: XSS in Mediawiki CampaignEvents Extension | NextGuard