[HIGH] phpMyFAQ privilege escalation: GroupController::updatePermissions lets a GROUP_EDIT admin grant rights they do not hold

PKSA-p7rj-kmfh-92s9 GHSA-pg62-f8g4-4wqh

Affected package: phpmyfaq/phpmyfaq

Affected version: <=4.1.4

Reported by:
GitHub