Neop Postalicious vulnerabilities

• neop postalicious Postalicious <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings CVE-2026-1266 4.4 MediumJanuary 24, 2026