CVE-2026-109963

Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor admintemplates.php because the mail body is fetched by mailbodyid without an adminid ownership check. Authenticated reseller admins can pair their own subjectid with sequential foreign...

CVE-2026-109963

Froxlor versions prior to 2.3.14 are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability within the email template editor via admin_templates.php. The root cause is that the system fetches the mail body using mailbodyid without performing an adminid ownership check. This allows...

PT-2026-56903

Name of the Vulnerable Software and Affected Versions LibreBooking versions prior to 5.1.0 Description The email template editor save action allows a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. This occurs because the...

CVE-2026-61343: Relative Path Traversal

LibreBooking's email template editor save action passes the submitted template name directly into the destination file path, allowing a remote attacker with administrator credentials to write an arbitrary file outside the template directory and execute code. Fixed in 5.1.0...