Skip to content

Known vulnerabilities in salonbookingsystem salon_booking_system

Is your version affected?

CVE Summary Score Published
CVE-2024-37231 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System… 8.6 High Jun 24, 2024
CVE-2024-3229 The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type… 9.8 Critical Jun 19, 2024
CVE-2024-2429 The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings,… 4.3 Medium Apr 26, 2024
CVE-2024-2102 The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field… 4.7 Medium Apr 17, 2024
CVE-2024-2101 The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field… 5.7 Medium Apr 17, 2024
CVE-2024-30510 Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue… 10.0 Critical Mar 29, 2024