An improper access check allows users to display a list of modules in the frontend.
CWE-284, NVD-CWE-noinfo