Reflected XSS in LMS (CVE-2026-40457) | HOL Guard CVE