Privilege Escalation

craftcms/cms is vulnerable to privilege escalation. The vulnerability exists because it does not validate the original user's password and expects impersonated user's password...