[MEDIUM] Sulu: Stored XSS via media download inline-disposition override

PKSA-nbbf-nf63-19vd CVE-2026-82396 GHSA-pp4x-ccxq-6r33

Affected package: sulu/sulu

Affected version: >=3.0.0-alpha1,<3.0.8|<=2.6.24

Reported by:
GitHub