Vulnerabilities > Salonbookingsystem > Salon Booking System > 8.5.2

DATE CVE VULNERABILITY TITLE RISK
2024-06-08 CVE-2024-4468 Missing Authorization vulnerability in Salonbookingsystem Salon Booking System
The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions hooked into admin_init in all versions up to, and including, 9.9.
network
low complexity
salonbookingsystem CWE-862
5.4
2024-03-29 CVE-2024-30510 Unspecified vulnerability in Salonbookingsystem Salon Booking System
Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 9.5.
network
low complexity
salonbookingsystem
critical
9.8