[MEDIUM] Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

PKSA-ht1d-wm6t-8sdj CVE-2026-75834 GHSA-q2j8-x8hf-63ch

Affected package: getgrav/grav

Affected version: <2.0.14

Reported by:
GitHub