[HIGH] RCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin

PKSA-fnz6-639n-kpcq CVE-2026-32261 GHSA-8wg7-wm29-2rvg

Affected package: craftcms/webhooks

Affected version: >=3.0.0,<3.2.0

Reported by:
GitHub