Ghost: Cache-poisoning XSS in Ghost frontend via x-ghost-preview header (CVE-2026-53943) | HOL Guard CVE