CVE-2025-49353: CSRF/XSS in Noindex by Path | NextGuard