GHSA-gjpq-2gcq-78q9: Incomplete authorization in ProjectSend file-version linking

ProjectSend versions 2.0.0 through 2.7.1 contain an incomplete authorization vulnerability that allows staff users to share files without authorization by linking file versions.