Frontend Admin by DynamiApps < 3.28.30 - Unauthenticated Privilege Escalation to Administrator via Role Form Field

Description

The plugin is vulnerable to Privilege Escalation due to insufficient validation of user-supplied role values in the 'validate_value', 'pre_update_value', and 'get_fields_display' functions. This makes it possible for unauthenticated attackers to register as administrators and gain complete control of the site, granted they can access a user registration form containing a Role field.