Summer Pearl Group Vacation Rental Management Platform versions prior to 1.0.2 have an insufficient server-side authorization vulnerability. Authenticated attackers can manipulate request parameters to perform create, update, or delete actions on resources owned by other users. This flaw allows unauthorized modification of data across user boundaries.