lustmored Lockme calendars integration

• CVE-2026-3367 Medium 4.4 Lockme OAuth2 calendars integration <= 2.11.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'App ID' Setting 0.4%