4.3
Moyenne
CVE-2024-2429 The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings,…
Description
The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Salon booking system 9.6 | premières → 9.6.5 | Pas de correctif indiqué |
| salon_booking_system 9.6 | premières → 9.6.5 | Pas de correctif indiqué |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Salon booking system
Les 21 CVE de Salon booking system →
CVE-2026-110034
The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a…
3.7
Faible
CVE-2026-110033
The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching…
6.8
Moyenne
CVE-2026-110032
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles…
5.5
Moyenne
CVE-2026-110035
The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon…
4.3
Moyenne