AIKIDO-2025-10560

TL;DR

Affected versions of this package are vulnerable to Access Bypass due to insufficient permission controls in the section-adding functionality. The module fails to properly restrict users with specific permissions, including View published content, Create/Edit content for relevant types, Configure layout overrides, and Access Layout Builder page, from adding unauthorized sections during content editing. An attacker possessing these permissions could exploit this flaw to manipulate page layouts beyond their intended privileges, potentially injecting malicious components or altering page structures.