Booking Package < 1.7.25 - Unauthenticated Price Manipulation via Service and Option Cost Parameters

Description

The plugin does not validate the payment amount server-side against the stored service price, deriving the expected charge from attacker-supplied request values instead, so an unauthenticated attacker can pay an arbitrary fraction of a service's real price.