[HIGH] Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

PKSA-r87g-h2pd-9vq1 GHSA-86vw-x4ww-x467

Affected package: craftcms/cms

Affected version: >=5.5.0,<=5.9.13

Reported by:
GitHub