Lcweb-projects Privatecontent Free vulnerabilities

• lcweb-projects privatecontent free PrivateContent Free <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' Shortcode Attribute CVE-2026-4025 6.4 MediumApril 8, 2026