Threats tagged 'ghsa-jcjm-739f-85v5'

A Missing Authorization vulnerability (CWE-862) exists in Magepeople inc.'s Taxi Booking Manager for WooCommerce (ecab-taxi-booking-manager) up to version 2.1.6. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification of data or functionality. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity), indicating limited impact on confidentiality but potential integrity issues. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.