This vulnerability in Webba Appointment Booking (Webba Booking) arises from missing authorization checks, which means that certain actions or resources may be accessible without proper permission validation. The issue affects versions up to 6.2.1. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction. The impact is limited to integrity, with no confidentiality or availability impact. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability allows an attacker with low privileges to perform actions or access resources that should require higher authorization, potentially leading to unauthorized modifications (integrity impact). There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is available, users should monitor vendor communications for updates. Until a fix is released, review and tighten access control configurations where possible to limit exposure.