CVE-2026-122325

The fossasia eventyay-exhibition software (through commit f68888e) contains an authorization bypass vulnerability in the exhibitor lead creation API. This flaw allows exhibitors with lead scanning enabled to access attendee data belonging to other organizers. By submitting another event's pseudon...