ntozier
Experiencing the same thing here on registration and "forgot password" as well. Once a user clicks the link in the email, the profile.php page opens, and has their information auto-filled because of the token in the link.
After typing in the New Password and Confirm New Password, and clicking update, it goes right back to the profile.php page, but this time, with the highlighted "errors" from @Jayfont's report.
You can tell it is on a different "version" of the page, because now a new field "Current Password" shows up like it would by default if you were able to log in, and wanted to just change your password.
After clicking update, even after seeing the red text above, you can use all the links in the header to navigate just fine, and you can sign out, and when you sign back in, the old password fails and the new password works.
This is confusing to end users, because they think it didn't work, and they keep emailing us new support requests because the password reset isn't working, when in reality, it is just never getting to the Http::redirect('tickets.php') line in profile.php like it should.
