Medium 6.4 Unfixed Closed 2026-01-24≤ 1.2.1 CM CSS Columns <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag' Shortcode Attribute EUVDWordfenceCVE