PT-2026-108128

Name of the Vulnerable Software and Affected Versions QloApps versions prior to 1.7.1 Description An authorization bypass exists in the postProcess function of the AdminHotelRoomsBookingController. This issue allows restricted back-office employees to access data from hotels not assigned to their...