Cpe:2.3:a:pixelandtonic:craft_cms:*:*:*:*:*:*:*:*

Craft CMS versions prior to 5.10.11 contain a vulnerability allowing unauthenticated attackers to inherit administrator privileges by registering with the email address of a deactivated admin account when specific registration settings are active.