PT-2021-19460

Name of the Vulnerable Software and Affected Versions Gestsup versions prior to 3.2.10 Description The issue allows for account takeover through the password recovery functionality remotely. It is caused by a weak algorithm used for generating password recovery tokens in the forgot pwd.php file,...