[HIGH] phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

PKSA-hycs-5t33-gw1y GHSA-pg62-f8g4-4wqh

Affected package: thorsten/phpmyfaq

Affected version: <=4.1.4

Reported by:
GitHub