CVE-2026-35571Emissary has Stored XSS via Navigation Template Link InjectionEmissary has Stored XSS via Navigation Template Link Injection