VULNERABILITY INTELLIGENCE

CVE-2026-71625

CVSS score9.8 CRITICAL

EPSS probability0.74%

CISA KEVNot currently listed

Published2026-09-04

Last modified2026-09-09

Description

An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component