[HIGH] Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes

PKSA-dxs6-j3rv-n16d CVE-2026-42612 GHSA-9695-8fr9-hw5q

Affected package: getgrav/grav

Affected version: <2.0.0-beta.2

Reported by:
GitHub