CVE-2025-63563
Medium
Description
Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows an attacker with a valid session token to maintain access to the account even after the legitimate user changes their password.
SeverityMedium
CVSS6.5
Exploit probability19. percentile0.3%
ProductSummerpearlgroup Vacation Rental Management Platform
PublishedOct 31, 2025
First seenOct 31, 2025
Weakness typeCWE-286CWE-286
How to fix
Update
- summerpearlgroup vacation_rental_management_platform1.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| summerpearlgroup vacation_rental_management_platform | v < 1.0.2 | 1.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.