Concrete CMS is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate (CVE-2026-8414) | HOL Guard CVE