Threats tagged 'ghsa-q8cr-9p4h-4w5w'

The GemBooking WordPress plugin versions prior to 1.7.1 have a concurrency control flaw that allows unauthenticated users to create overlapping confirmed bookings for the same team member by sending simultaneous booking requests. This occurs because the plugin does not serialize concurrent booking requests per team member, potentially leading to booking conflicts.