CVE-2026-105995: Booking Package 0 to before 1.7.30

Affected technology

Booking Package · 0 to before 1.7.30
Vendor not specified by the source

Description’s affected range: before 1.7.30 does not perform authorization checks before returning stored reservation data

Component: Not specified by the source

What an attacker can do

Unauthenticated users can disclose other customers' personal information and booking cancellation tokens.