CVE-2026-65757

Description

The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.