SherkSpear Sherk Custom Post Type Displays

• CVE-2026-3554 Medium 6.4 Sherk Custom Post Type Displays <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute 0.2%