Craft CMS Admin Privilege Escalation

Craft CMS versions before 5.10.11 have a vulnerability that allows attackers to gain administrator privileges.

When public registration is enabled and email verification is disabled, an attacker can register using an email address of a deactivated admin account, inheriting their administrator privileges.