Unknown Hotel Booking

• CVE-2026-84166 Medium 4.3 Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF 0.1%
• CVE-2026-84167 Medium 4.3 Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR 0.2%