CVE-2020-21342

Name of the Vulnerable Software and Affected Versions: zzcms version 201910

Description: The issue is related to insecure permissions, allowing the reset of any user's password via the /one/getpassword.php endpoint.

Recommendations: For zzcms version 201910, consider restricting access to the /one/getpassword.php endpoint until a fix is available. As a temporary workaround, review and modify the permissions settings to prevent unauthorized password resets.