$assetsUrl in CmsModule is accessed in CmsFileUpload widget via this->owner->module->assetsUrl. Who knew? Changes assetsUrl in CmsModule to be public and dropped the underbar prefix.