🚨 CVE-2026-56059
Subscriber Arbitrary File Upload in Travel Booking <= 2.2.5 versions.