This vulnerability involves a weak password recovery mechanism in the Gilblas Ngunte Possi PSW Front-end Login & Registration product, versions up to 1.13. The weakness allows an attacker to exploit the password recovery process without privileges or user interaction, resulting in high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on all three security properties. No patch or mitigation details are currently provided by the vendor or authoritative sources.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to fully compromise user accounts by exploiting the password recovery mechanism, leading to complete loss of confidentiality, integrity, and availability of the affected accounts. This could result in unauthorized access, data theft, or service disruption within the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the password recovery feature or implementing additional verification controls if possible. Monitor vendor communications for updates and apply patches promptly once available.