Davidkeen Gpxpress vulnerabilities

• davidkeen gpxpress GPXpress <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CVE-2025-13960 6.4 MediumDecember 12, 2025