InvoicePlane Password Reset Vulnerability

InvoicePlane is a free and open source goods billing and customer management software. A password reset vulnerability exists in the index.php/sessions/passwordreset page of InvoicePlane version 1.4.8, which can be exploited by an attacker to reset the password of any user...