Team Members <= 8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'custom_css' Parameter (CVE-2026-12114) | HOL Guard CVE