We are currently on Moodle 3.5.14 and were recently made aware of this issue. Any guidance in resolving this would be appreciated.
When a user submits a forgot password request, the link in the email that they receive doesn't work when it is clicked. By that, I mean that it simply redirects them to the forgot password page again. But when the user copy/pastes the link, it works and prompts the user to enter the new password. It looks like the parameters are not being passed when the link is clicked even though we can clearly see the token as a part of the link. Please advise.