An Incorrect Access Control vulnerability in "/admin/programm//export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.
NVD-CWE-Other, CWE-284