Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.