CVE-2026-104883

Commit "2b83a60f7763" 5.7.3 hardened the template editor: it added "TemplateEditorModuleVoter" + "CheckTemplateEditorSaveListener" so a non-admin cannot self-grant the "tpleditor" backend MODULE editable ".html5" templates = PHP = RCE. That voter supports ONLY the "modules" field and the literal...