CVE-2026-91111 - Uploaded XML XSS

PKSA-vyds-y4jb-5ff4 CVE-2026-91111

Affected package: silverstripe/userforms

Affected version: <7.1.4

Reported by:
FriendsOfPHP/security-advisories