CVE-2026-71625 | Slimkit ThinkSNS+ 2.4 ResetPasswordController ResetPasswordController.php privileges management

September 4, 2026 Yanac

A vulnerability categorized as critical has been discovered in Slimkit ThinkSNS+ 2.4. Impacted is an unknown function of the file ResetPasswordController.php of the component ResetPasswordController. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-71625. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More