CVE-2026-24391: Reflected XSS in ThemeMakers Car Dealer | NextGuard