[MEDIUM] CakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scripting

PKSA-y889-wbb2-rsdf CVE-2026-23643 GHSA-qh8m-9qxx-53m5

Affected package: cakephp/cakephp

Affected version: =5.3.0|>=5.2.10,<5.2.12

Reported by:
GitHub