Email Address Enumeration Vulnerability in SEO Panel 4.10.0 Password Reset Function

Email Address Enumeration Vulnerability in SEO Panel 4.10.0 Password Reset Function

CVE-2024-22646 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.

Learn more about our Web Application Penetration Testing UK.