medium6.5
CVE-2021-41696
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
Impact
An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Globaldatingsoftware | Premiumdatingscript | Version 4.2.7.7 |