Threats tagged 'ghsa-jwq4-hvc6-vpm4'

CVE-2025-66105 is a Missing Authorization vulnerability in Magepeople inc.'s Bus Ticket Booking with Seat Reservation application. The flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions. It affects versions prior to 5.6.8. The vulnerability has a medium severity score of 5.3 with no confidentiality or availability impact but with integrity impact.