[MEDIUM] Craft CMS:Authorization bypass: view-only Categories user can modify category structure via structures/move-element

PKSA-gh5w-x99g-b53n GHSA-xxpx-f366-4xpq

Affected package: craftcms/cms

Affected version: >=5.0.0-RC1,<5.10.6

Reported by:
GitHub