Describe the bug
A CSRF vulnerability in the submitDefualtEditor function was reported by Rio Darmawan via WordFence

Expected behavior
A nonce field should be added to the form, and that nonce should be validated in the formActionRoute method, from which the submitDefaultEditor method is called.

Additional context
This vulnerability has a CVE number reserved for it, however no data was submitted to the CVE for this vulnerability at the time of this ticket being created. If / When it is, the CVE report can be found here CVE-2023-25480