Vendor
Storyden versions through 1.26.16 contain a privilege escalation vulnerability allowing users with MANAGE_ROLES to assign administrative permissions, leading to full instance takeover.