CVE-2026-71625

CRITICAL CVSS: 9.8 Published: 2026-09-04 Modified: 2026-09-09

Description

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component

Affected Platforms

Unknown

Weakness Type

CWE-269, CWE-640

References