[kemister85]

Ticket: TINYDOC-3690

Site: Staging branch

Changes:

• Replace CVE: _pending_ with the CVE-2026-116675 link for the media plugin data-mce-object serialization XSS fix (GHSA-mf2p-h6hf-fcwm).

---

Pre-checks:

• Branch is correctly prefixed: hotfix/8/TINYDOC-3690
• modules/ROOT/nav.adoc has been updated (if applicable).
• Files have been included where required (if applicable).
• Files removed have been deleted, not just excluded from the build (if applicable).
• Files added for New product features include a release note entry.
• Major or minor version changes have updated the supported-versions.adoc table.
• Build passes without console errors, warnings, or issues.

---

Review:

• Documentation Team Lead has reviewed.