Cvmh Sticky vulnerabilities

• cvmh sticky Sticky <= 2.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'readmoretext' Shortcode Attribute CVE-2026-6397 6.4 MediumMay 20, 2026