SiYuan before v3.7.4 Stored XSS via select option color (CVE-2026-73050) | HOL Guard CVE