Description
Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| magepeopleteam | Bus Ticket Booking with Seat Reservation | ≤ 5.9.3 | — |
Medium · 6.5
CVE-2026-97251
EUVD-2026-90856GHSA-v9gq-f97f-p39p
WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.3 - Insecure Direct Object References (IDOR) vulnerability
Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack