georgringer/news has SQL Injection in extension "News system" (news) (CVE-2026-8726) | HOL Guard CVE