XSS 2 CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV Nov 30, 2025 XSSing TypeErrors in Safari May 30, 2025