CVE-2025-48916

CVE-2025-48916 affects Drupal Bookable Calendar before 2.2.13. A missing/incorrect authorization check in the module allows forceful browsing (unauthenticated access/bypass) to vulnerable resources. Affected versions are 0.0.0 through 2.2.12; patch 2.2.13 or later is the recommended remediation. ...