diff --git a/src/css/manage/blueprints/_form-layout.scss b/src/css/manage/blueprints/_form-layout.scss
index c23efe54f..022b25d32 100644
--- a/src/css/manage/blueprints/_form-layout.scss
+++ b/src/css/manage/blueprints/_form-layout.scss
@@ -51,7 +51,10 @@ $border-color: #c3c4c7;
 		&:hover,
 		&:focus-visible {
 			background: var(--cs-color-accent-subtle);
-			color: var(--cs-color-accent);
+
+			// The lighter accent reaches only 3.8:1 on this background; the
+			// hover shade clears AA for normal text.
+			color: var(--cs-color-accent-hover);
 			outline: none;
 		}
 
diff --git a/tests/unit/Flat_Files/Handlers/Functions_Snippet_Handler_Test.php b/tests/unit/Flat_Files/Handlers/Functions_Snippet_Handler_Test.php
index b10e58b23..fba0b1916 100644
--- a/tests/unit/Flat_Files/Handlers/Functions_Snippet_Handler_Test.php
+++ b/tests/unit/Flat_Files/Handlers/Functions_Snippet_Handler_Test.php
@@ -52,7 +52,7 @@ private function assert_valid_php( string $wrapped ): void {
 		$output = [];
 		$status = 0;
 		// phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.system_calls_exec -- A subprocess is the only way to detect a compile error without killing the test run.
-		exec( escapeshellcmd( PHP_BINARY ) . ' -l ' . escapeshellarg( $file ) . ' 2>&1', $output, $status );
+		exec( escapeshellarg( PHP_BINARY ) . ' -l ' . escapeshellarg( $file ) . ' 2>&1', $output, $status );
 		// phpcs:ignore WordPress.WP.AlternativeFunctions.unlink_unlink -- Removing a temp file created by this test.
 		unlink( $file );