VYPR

com_booking

by Joomla

CVEs (1)

  • CVE-2023-54357HigJun 19, 2026
    risk 0.49cvss 7.5epss 0.01

    Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with…