Description
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.
Remediation
References
Related Vulnerabilities
ownCloud Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-35947)
Next.js Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2022-36046)
WordPress Plugin WP Social Invitations Cross-Site Scripting (1.4.4.2)
WordPress Plugin WPFront User Role Editor Multiple Cross-Site Scripting Vulnerabilities (2.13)