Bug name : Forget password link sent over http
it's a p4 category bug
first lets see how to find this bug ..
first create you account with reqired details
after sign in and signout from your account
after go to that website login page click on forget password ?
after enter your email
click on request reset link
check your email you will get an email to reset your password
right click on click to reset (in my case click to reset in your case it will be diffrent)
click on copy link address
paste that copied link in a new tab
you can see it's sent over http(Hypertext Transfer Protocol) \
when if you see like this dont waste your time just report it. if you wasted your time you will ended up with a duplicate
most of the website sent on link via https(Hypertext Transfer Protocol Secure)
This is a 100% bug easy bug
if you have any doubts do comment
Thans for reading
JAISHREERAM
JAIHIND