Jeremyshapiro Next Date vulnerabilities

• jeremyshapiro next date Next Date <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'default' Shortcode Attribute CVE-2026-4920 6.4 MediumMay 12, 2026