JVN#75063798: Booked vulnerable to open redirect

Booked provided by Twinkle Toes Software contains an open redirect vulnerability (CWE-601).

Impact

When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.
The developer has released Booked 3.3 that addresses the vulnerability.

Products Affected

• Booked versions prior to 3.3