Admin email HTML injection via raw Blade echo

HTML injection in Bagisto 2.4.0 through 2.4.4 allows remote attackers to alter admin registration emails via crafted name fields. The public /customer/register flow stores first_name and last_name, derives customer->name from them, and inserts that value into the admin registration email through a raw Blade echo around a translated HTML anchor. Exploitation requires customer registration and the notification email path to be active; published evidence shows attacker-controlled HTML in the email body, enabling spoofed content or phishing-style links in administrator mail.