← Vulnerability feed

Vulnerability record · CVE-2023-24058 · published 22 January 2023

CVE-2023-24058: Twinkletoessoftware booked improper access control vulnerability

Twinkletoessoftware · Booked

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected.

4.3 CVSS 3.1 Medium EPSS 0.99% · top 38.9% CWE-284 · Improper access control
4.3CVSS 3.1 base score
0.99%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References, 6 tagged exploit
17 Jun 2026Last modified by NVD

Description

Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservation_save.php. NOTE: 2.5.5 is a version from 2014; the latest version of Booked Scheduler is not affected. However, LabArchives Scheduler (Sep 6, 2022 Feature Release) is affected.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L23 ExploitThird Party Advisory
https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php ExploitThird Party Advisory
https://github.com/LibreBooking/app/tags?after=2.7.1 Third Party Advisory
https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability ExploitThird Party Advisory
https://www.bookedscheduler.com/the-future-of-booked/ Vendor Advisory
https://www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/ Release NotesVendor Advisory
https://www.limswiki.org/index.php/Booked Third Party Advisory
https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Pages/Ajax/ReservationSavePage.php#L23 ExploitThird Party Advisory
https://github.com/LibreBooking/app/blob/0a6cb1a9eb84835553c8caf93db2791f8655140f/Web/ajax/reservation_save.php ExploitThird Party Advisory
https://github.com/LibreBooking/app/tags?after=2.7.1 Third Party Advisory
https://s1n1st3r.gitbook.io/theb10g/booked-scheduler-v2.5.5-vulnerability ExploitThird Party Advisory
https://www.bookedscheduler.com/the-future-of-booked/ Vendor Advisory
https://www.labarchives.com/labarchives-knowledge-base/2022-feature-releases-2/ Release NotesVendor Advisory
https://www.limswiki.org/index.php/Booked Third Party Advisory

Track CVE-2023-24058 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-9581Twinkletoessoftware booked unrestricted file upload vulnerabilityphpscheduleit Booked Scheduler 2.7.5 allows arbitrary file upload via the Favicon field, leading to execution of arbitrary Web/custom-favicon.php PHP…EPSS 13%6.1CVE-2022-30706Twinkletoessoftware booked open redirect vulnerabilityOpen redirect vulnerability in Booked versions prior to 3.3 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and …EPSS 0.63%

Source: NIST National Vulnerability Database (record CVE-2023-24058), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.