Stored XSS in ticket confirmation page (CVE-2026-13225) | HOL Guard CVE