medium6.5
CVE-2025-63563
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change.
Impact
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Summerpearlgroup | Vacation Rental Management Platform | before 1.0.2 |