CVE-2024-9882

< 1.9.4

The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1.9.4 does not saniti

4.8MEDIUM

CVE-2025-32220

<= 10.11

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Conf

5.4MEDIUM

CVE-2025-31560

<= 10.11

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalati

7.2HIGH

CVE-2024-47316

< 10.9.1

Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This is

4.3MEDIUM

CVE-2024-39658

< 10.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon b

7.6HIGH

CVE-2024-43280

< 10.9

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issue affects

4.7MEDIUM

CVE-2024-37231

< 10.0

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking

8.6HIGH

CVE-2024-3229

< 10.3

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the S

9.8CRITICAL

CVE-2024-4468

< 10.0

The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capab

4.3MEDIUM

CVE-2024-4442

< 10.0

The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8.

9.1CRITICAL

CVE-2023-48319

< 8.7

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue af

6.8MEDIUM

CVE-2024-2603

< 9.6.6

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high

6.3MEDIUM

CVE-2024-2439

< 9.6.6

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high

4.8MEDIUM

CVE-2024-2429

< 9.6.6

The Salon booking system WordPress plugin through 9.6.5 does not have CSRF check in place when updating its settings, which could

4.3MEDIUM

CVE-2024-2102

< 9.6.3

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field and 'sms_pre

4.7MEDIUM

CVE-2024-2101

< 9.6.3

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking

5.7MEDIUM

CVE-2024-30510

< 9.5.1

Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salo

10.0CRITICAL

CVE-2023-3427

<= 8.4.6

The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.6.

5.4MEDIUM

CVE-2022-43487

< 7.9

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to injec

6.1MEDIUM

CVE-2022-0920

< 7.6.3

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, wh

7.5HIGH

CVE-2022-0919

< 7.6.3

The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, all

5.3MEDIUM

CVE-2021-24429

< 6.3.1

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an

6.1MEDIUM