On profile screen, the user is able to update their password without confirming their current password.
This is a big client-side security vulnerability because an unauthorized individual could physically gain access to the client computer and change the password of the current logged in user.
Solution:
Add modal prompt for current password before updating the user password.