We found a bug involving bad input sanitization. If an apostrophe is used in the "conference name" field when creating a new conference, the code ends up using the last stored conference instead (highest booking ID number) and merges invitees with it.