Vulnerability in Salon Booking System
CVE-2026-17023
The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, which is also hooked for unauthenticated users, allowing an u…
Affected products
- Unknown Salon Booking System — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)