Drupal Bookable Calendar module < 2.2.13 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Ludo Hartzema absoludo in WordPress Module Bookable Calendar versions 2.2.13...