OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover (CVE-2026-55879) | HOL Guard CVE