CVE-2026-39678

Publication date

2026-04-08 08:30:40

Family

Patchstack

State

PUBLISHED

Description

Missing Authorization vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through <= 2.9.9.6.5.