Blakelong Custom Frames vulnerabilities

• blakelong custom frames Custom Frames <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Parameter CVE-2025-13705 6.4 MediumDecember 13, 2025