BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field (CVE-2025-15665) | HOL Guard CVE