Unknown Optima Express IDX

• CVE-2026-96899 Medium 6.8 Optima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_script 0.2%
• CVE-2026-96897 Medium 5.3 Optima Express 8.5.0 - 8.7.5 - Unauthenticated Author Account Creation & Application Password Rotation via ihf_clear_cache 0.2%