I’ve found and locally fixed a bug. When a booker uses a link to cancel his booking, the html form is not closed. I have another form in the right sidebar and as a result both forms submit as one.

The fix: in eme_payments.php file edit function eme_cancel_payment_form($payment_randomid)

$output .= eme_replace_cancel_payment_placeholders($format,$person,$booking_ids);
$output .= ‘</form>’;
return $output;

Please check the other functions for the same bug.