CVE-2018-1000501

CVE-2018-1000501 affects Instant Update CMS. The vulnerability in /iu-application/controllers/administration/auth.php allows a password-reset-related account takeover and is exploitable via network connectivity. It appears to have been fixed in v0.3.3.