CVE-2026-71435

CVE-2026-71435 affects Statamic CMS (Laravel/Git-powered). Prior to versions 5.74.3 and 6.24.2, the default automagic form notification email rendered user-submitted values without escaping, allowing an unauthenticated form submitter to inject HTML into notification emails sent to configured reci...