[MEDIUM] Statamic: Stored Cross-Site Scripting in Automagic Form Notification Email Template

PKSA-h7t4-kgpy-prgj CVE-2026-71435 GHSA-vx89-p3j7-8xqc

Affected package: statamic/cms

Affected version: >=6.0.0,<6.24.2|<5.74.3

Reported by:
GitHub