PT-2026-68745

Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.0.2 Description The /api/log endpoint accepts unauthenticated POST requests without schema validation of the message body. This allows attacker-controlled content to be written directly into the application's...

CVE-2026-48083: Improper Output Neutralization for Logs

OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the /api/log endpoint accepts unauthenticated POST requests, applies no schema validation to the message body, writes attacker-controlled content directly into the...