| CVE-2024-37231 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System…
|
8.6
High
|
Jun 24, 2024 |
| CVE-2024-3229 |
The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
|
9.8
Critical
|
Jun 19, 2024 |
| CVE-2024-2429 |
The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings,…
|
4.3
Medium
|
Apr 26, 2024 |
| CVE-2024-2102 |
The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field…
|
4.7
Medium
|
Apr 17, 2024 |
| CVE-2024-2101 |
The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field…
|
5.7
Medium
|
Apr 17, 2024 |
| CVE-2024-30510 |
Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue…
|
10.0
Critical
|
Mar 29, 2024 |