Medium 6.4 Unfixed Closed 2026-01-24≤ 1.0 Canto Testimonials <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'fx' Shortcode Attribute EUVDWordfenceCVE