CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page.
Published March 23, 2020.
Codeigniter Codeigniter
