EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField (CVE-2026-54087) | HOL Guard CVE