A vulnerability in Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2 allows active user sessions to remain valid after a password change. This flaw enables an attacker who already has a valid session token to maintain access to the account even after the legitimate user updates their password.