Josh Fabean

The issue is related to a Missing Authorization vulnerability in Drupal Bookable Calendar, which allows Forceful Browsing.