Product
Craft CMS versions 5.0.0 through 5.11.1 contain a privilege escalation vulnerability that allows unauthenticated attackers to hijack deactivated accounts and inherit existing user permissions when email verification is disabled.