Canva ortto authorization issue vulnerability

Versions of Canva Ortto prior to 1.0.25 contain an authorization issue vulnerability. This vulnerability arises from the lack of authentication for configuration update requests; it relies solely on a key exposed in public HTML, potentially allowing unauthenticated attackers to override plugin...