PT-2026-63614

The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...