CVE-2026-105195: Booking Calendar 10.15 to before 11.8.3

Affected technology

Booking Calendar · 10.15 to before 11.8.3
Vendor not specified by the source

Description’s affected range: before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.