The fast-fashion giant says a third-party vendor supplied the image and has launched an internal review.