PT-2026-137227

Name of the Vulnerable Software and Affected Versions Pocket ID versions 2.2.0 through 2.11.0 Description An issue exists where the SendEmailVerification function uses a token model that binds an email-verification token only to the user identifier. Because the UpdateUser function allows changing...