CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud