CVE-2026-66679 Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions

Description

Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.

Affected products and versions

Product	Affected versions	Fixed in
Appointment Hour Booking 1.5	earliest → 1.5.91	No fix stated

Other CVEs of Appointment Hour Booking

The 4 CVEs of Appointment Hour Booking →

CVE-2026-65514 Contributor Cross Site Scripting (XSS) in Appointment Hour Booking <= 1.5.86 versions 6.5 Medium CVE-2023-45649 Missing Authorization vulnerability in codepeople Appointment Hour Booking appointment-hour-booking allows Exploiting… 5.3 Medium CVE-2024-32720 Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows… 5.3 Medium