code-projects Project Management System Mail Compose mail.php cross site scripting (CVE-2026-13504) | HOL Guard CVE