Cm3 Acora CMS vulnerabilities
1 known vulnerability in Cm3 Acora CMS from Ddsn. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
Cm3 Acora CMS: Weak Password Recovery Mechanism for Forgotten Password
A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.