CVE-2026-88992 - Userforms CSV export restricted file access

PKSA-w1yx-v3g8-nw8g CVE-2026-88992

Affected package: silverstripe/userforms

Affected version: <7.1.4

Reported by:
FriendsOfPHP/security-advisories