Unknown Rox Appointment Booking

• CVE-2026-87907 Medium 5.3 Rox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST Routes 0.3%
• CVE-2026-87896 Medium 5.3 Rox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST Route 0.3%
• CVE-2026-87894 Medium 5.3 Rox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOR 0.3%
• CVE-2026-87892 Medium 5.3 Rox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction Bypass 0.3%
• CVE-2026-87891 Medium 6.5 Rox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST API 0.3%