CVE-2026-24384: CSRF in Merge + Minify + Refresh | NextGuard