Critical account takeover and privilege escalation vulnerability allow a low privilege user to take over admin account by using change password functionality.
In a normal user, select change password
Change the user ID to 1 as it is the admin account user ID
Admin account is taken over immediately