TypiCMS Core has Stored Cross-Site Scripting (XSS) via SVG File Upload (CVE-2026-27621) | HOL Guard CVE