CVE-2024-0425 | ForU CMS up to 2020-06-23 index.php password recovery

A vulnerability classified as critical was found in ForU CMS up to 2020-06-23. This vulnerability affects unknown code of the file /admin/index.php?act=reset_admin_psw. The manipulation leads to weak password recovery.

This vulnerability was named CVE-2024-0425. The attack can be initiated remotely. Furthermore, there is an exploit available.