Getgrav Grav-plugin-shortcode-core vulnerabilities

• getgrav grav-plugin-shortcode-core Grav Shortcode Core before 6.2.5 Stored XSS via unescaped parameters CVE-2026-85599 5.1 MediumSeptember 4, 2026
• getgrav grav-plugin-shortcode-core Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers CVE-2026-64851 8.5 HighAugust 19, 2026