Salon Booking System

7 CVEs across 1 Salon Booking System products. Browse Salon Booking System vulnerabilities, severities, and proof-of-concept exploits.

Salon Booking System products with known CVEs

ProductCVEs
Salon Booking System7
Salon Booking System CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-39658High7.62024-08-29Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Inje…
CVE-2024-43280Medium4.72024-08-19URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/…
CVE-2024-37231High8.62024-06-24Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File Manipulat…
CVE-2023-48319Medium6.82024-05-17Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: f…
CVE-2024-30510Critical10.02024-03-29Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a th…
CVE-2022-43487Medium6.12022-12-05Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary script.
CVE-2021-24429Medium6.12021-07-12The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an appointment, allowing low pri…