[HIGH] Statamic CMS vulnerable to privilege escalation via stored cross-site scripting

PKSA-fst8-xgkz-31tn CVE-2026-25759 GHSA-ff9r-ww9c-43x8

Affected package: statamic/cms

Affected version: >=6.0.0,<6.2.3

Reported by:
GitHub