pubudu-malalasekara Post Blocks & Tools

• CVE-2026-5711 Medium 6.4 Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute 0.2%
• CVE-2025-11828 Medium 6.4 Magazine Companion <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%