SS-2026-006 - RCE via template string escaping in userforms email subject

PKSA-761z-bpk5-k27d

Affected package: silverstripe/userforms

Affected version: <6.4.10|>=7.0.0,<7.1.4

Reported by:
FriendsOfPHP/security-advisories