Getgrav grav-plugin-shortcode-core

• CVE-2026-85599 High 7.2 Grav Shortcode Core before 6.2.5 Stored XSS via unescaped parameters 0.3%
• CVE-2026-64851 High 8.5 Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers 0.5%