Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:37:35 +0000 CVE-2026-110229 — QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips https://db.gcve.eu/vuln/cve-2026-110229 <p><strong>Affected:</strong> Webkul QloApps</p> <p>QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels&#39; refund records, exposing customer identities and amounts.</p> <p><strong>Affected:</strong> Webkul QloApps</p> <p>QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hotels. Attackers can list, export as PDF, mark as redeemed, and generate store-credit vouchers from other hotels&#39; refund records, exposing customer identities and amounts.</p> https://db.gcve.eu/vuln/cve-2026-110229