Privilege escalation via unchecked role parameter

Missing authorization in Bludit CMS 4.0.0 allows local users with low privileges to become administrators through a crafted role parameter. The published record identifies the role parameter as the locus but does not disclose the handler or exact missing authorization check. A valid low-privileged account and local access are required; successful exploitation grants administrative control over the CMS.