Malcolm-oph Stageshow vulnerabilities

• malcolm-oph stageshow StageShow <= 10.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via anchor Parameter CVE-2025-5703 6.4 MediumJune 6, 2025
• malcolm-oph stageshow StageShow <= 9.8.6 - Reflected Cross-Site Scripting CVE-2024-13705 6.1 MediumJanuary 30, 2025