Description
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
Critical · 9.8
CVE-2026-71625
EUVD-2026-71743GHSA-qqpx-hg5x-6qg8
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
Published Sep 4, 2026 · Updated Sep 9, 2026 · Assigned by mitre