CVE-2026-13471 LatePoint Plugin Abilities API execute resource injection · Briflio