CVE-2024-42914 — A host header injection vulnerability exists in the forgot password functionality of ArrowCMS version 1.0.0. By sending a specially crafted host header in the forgot password request, it is possible t — CVE Database · The Intelligence Room