CVE-2022-30706

The CVE-2022-30706 issue affects Booked versions prior to 3.3. Open redirect is possible when a specially crafted URL is accessed, enabling a remote unauthenticated attacker to redirect a user to an arbitrary site and potentially facilitate phishing. The root cause involves how user-supplied data...