Author: Prodego
Description:
Similar to what was done for new account creation, if a logged in user sends another user a password reset (for example, if that user's IP is blocked) then the username of the user who pressed the reset button should be sent in the password reset email, not that user's IP address.
Version: unspecified
Severity: enhancement