Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog (CVE-2026-46609) | HOL Guard CVE