Vvveb CMS Password Reset Authentication Bypass Vulnerability

Vvveb, a CMS with page builder for websites, blogs, and ecommerce stores, is affected by an Authentication Bypass vulnerability in its password reset functionality.

Prior to version 1.0.8.7, the password reset process fails to sufficiently validate the user and token GET parameters, allowing attackers to bypass authentication.

This issue has been patched in version 1.0.8.7.