An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user v…

A security vulnerability in Daylight Studio FuelCMS version 1.5.2 allows unauthenticated attackers to obtain password reset tokens of victim users through the Forgot Password feature. The attack is carried out by placing a crafted link in a valid email message. This vulnerability enables attackers to potentially gain unauthorized access to user accounts by intercepting or manipulating password reset tokens. The issue affects the authentication mechanism of the content management system and poses a significant risk to user account security.