PT-2023-19380

Name of the Vulnerable Software and Affected Versions Booked Scheduler version 2.5.5 LabArchives Scheduler affected versions not specified Description The issue allows authenticated users to create and schedule events for any other user by modifying the userId value in the reservation save.php...