[MEDIUM] Statamic Vulnerable to CSV formula injection in form submission exports

PKSA-q7zp-ytbf-kmf9 CVE-2026-54243 GHSA-h77m-qrj7-jxcw

Affected package: statamic/cms

Affected version: <5.73.24|>=6.0.0,<6.20.1

Reported by:
GitHub