PT-2021-10612

Name of the Vulnerable Software and Affected Versions: zzcms version 201910 Description: The issue is related to insecure permissions, allowing the reset of any user's password via the /one/getpassword.php endpoint. Recommendations: For zzcms version 201910, consider restricting access to the...