Medium 6.4 Unfixed Closed 2025-05-07≤ 1.3 Xavin's List Subpages <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting EUVDWordfencePatchstackCVE