PT-2025-46797
CVE-2025-64261
·
Published
2025-11-13
·
Updated
2025-11-15
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Appointment Booking Calendar versions through 1.3.95
Description
A missing authorization issue exists in codepeople Appointment Booking Calendar appointment-booking-calendar, allowing exploitation of incorrectly configured access control security levels.
Recommendations
Update Appointment Booking Calendar to a version later than 1.3.95.
Found an issue in the description? Have something to add? Feel free to write us 👾