Samclarke Sceditor vulnerabilities

• samclarke sceditor SCEditor affected by DOM XSS via emoticon URL/HTML injection CVE-2026-25581 Fix available 5.4 MediumFebruary 6, 2026