Administrator escalation via unrestricted permission assignment

Incorrect authorization in SOPlanning before 1.55 allows remote authenticated users with team-management rights to gain administrator access. The user-management tab permits the user_manage_team role to assign administrative permissions to any account, including the caller, through individual rights editing and Bulk Update. An account already holding that delegated role is required, and exploitation grants administrative control over the application.