CVE-2026-91114 - Stored XSS via unescaped permission in PermissionCheckboxSetField

PKSA-2w11-jnmw-7vn5 CVE-2026-91114

Affected package: silverstripe/framework

Affected version: <6.2.13

Reported by:
FriendsOfPHP/security-advisories