CVE-2024-40492: Stored XSS to ATO