Unknown Charitable

• CVE-2026-16650 Medium 5.3 Charitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass 0.2%
• CVE-2025-15675 Medium 4.8 Charitable < 1.8.5.3 - Admin+ Stored XSS via Photo Field ALT Text 0.2%