CVE-2026-48079

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, when a user navigates to the "/logout" page, the page's server-side load handler deletes the "accesstoken" cookie before calling "/api/auth/logout" via an internal...