gpriday SiteOrigin CSS

• CVE-2026-107764 High 7.2 SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Inspector href Sink 0.2%
• CVE-2026-111122 High 7.2 SiteOrigin CSS <= 1.6.7 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Anchor href via Visual Inspector 0.2%