CVE-2026-112066 – The JSON import of the cookie consent configuration did not respect the backend user’s per

The JSON import of the cookie consent configuration did not respect the backend user’s permissions. Non-admin backend users with access to the module could import a configuration that adds arbitrary scripts to the frontend of the website.