CVE-2026-36720

Description

Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via modifying their user type.

CVSS Vector

References

• https://github.com/CC-T-454455/Vulnerabilities/tree/master/bookcars/vulnerability-3
• https://github.com/CC-T-454455/Vulnerabilities/tree/master/bookcars/vulnerability-3