Reset Password Broken

Hello,

I’ve recently been alerted that the reset password page on my site is broken. Two issues:

1. There is a new empty input filed next to the pass1 (New Password) field. The field is labelled pass1-text and shows the user’s entered password in plain text as they type it.

Where is this pass1-text field coming from? I don’t see it in wp-login.php

2. The pass2 field (Confirm Password) only accepts 1 character and overwrites anything that was previously entered into pass1.
Not sure why this is happening as the input size is 20.

There are no js errors, but chrome is throwing a warning about duplicate user_login DOM element.

Thanks