TI-2023-30630 CVE-2023-54357 · GHSA-xgqm-c7vm-24xfJoomla com_booking 2.4.9 Information Disclosure via Account EnumerationPriority HIGH 77Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00658 · Published 2026-06-19 · No fix listed CWE-203