PT-2026-78298

Name of the Vulnerable Software and Affected Versions TrueBooker versions prior to 1.2.7 Description Insufficient authorization checks in an AJAX action allow unauthenticated users to delete arbitrary appointment records, including associated booking items and payment records. This occurs through...