Medium 6.4 Unfixed 2026-04-22≤ 1.2.106 CI HUB Connector <= 1.2.106 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute CVEWordfence