[MEDIUM] Statamic: Missing file upload validation on frontend forms allows uploading disallowed file types

PKSA-htv4-42tq-8d9c CVE-2026-71434 GHSA-qhr7-v3xp-vw9m

Affected package: statamic/cms

Affected version: >=6.0.0,<6.24.2|<5.74.3

Reported by:
GitHub