CVE-2026-5254: XSS in FFmate Webhook Handler | NextGuard