A vulnerability was found in Laravel Booking System Booking Core 2.0. It has been classified as critical. Affected is an unknown code of the file sandbox.bookingcore.org/user/profile/change-password of the component Password Change Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.