SB
Product
Salon booking system
21
CVEs
0
On KEV
8.8
Max CVSS
9
New 30D
Severity mix
Critical 0High 4Medium 16Low 1
Watch
Add Salon booking system to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110033 | 6.8 | Oct 18 | Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url' Affected: before 10.31.11 |
| CVE-2024-2603 | 6.3 | Apr 26 | Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settings Affected: through 9.6.5 |
| CVE-2024-2101 | 5.7 | Apr 17 | WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS) Affected: before 9.6.3 |
| CVE-2026-110032 | 5.5 | Oct 18 | Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editor Affected: before 10.31.11 |
| CVE-2026-110014 | 5.3 | Oct 16 | Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Status Affected: before 10.31.9 |
| CVE-2026-17021 | 5.3 | Aug 10 | Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tampering Affected: before 10.30.34 |
| CVE-2022-0919 | 5.3 | Apr 11 | Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosure Affected: 7.6.3 before 7.6.3 |
| CVE-2026-110013 | 4.8 | Oct 16 | Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Token Affected: before 10.31.9 |
| CVE-2026-17023 | 4.8 | Aug 10 | Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callback Affected: through 10.30.33 |
| CVE-2024-2439 | 4.8 | Apr 26 | Salon booking system <= 9.6.5 - Editor+ Stored XSS Affected: through 9.6.5 |
| CVE-2024-2102 | 4.7 | Apr 17 | Salon booking system < 9.6.3 - Unauthenticated Stored XSS Affected: before 9.6.3 |
| CVE-2026-110035 | 4.3 | Oct 18 | Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Route Affected: before 10.31.11 |
| CVE-2026-110012 | 4.3 | Oct 16 | Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcoming Affected: before 10.31.3 |
| CVE-2026-17020 | 4.3 | Aug 10 | Salon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII Disclosure Affected: through 10.31.0 |
| CVE-2026-11887 | 4.3 | Jul 1 | Salon Booking System < 10.30.20 - Subscriber+ Booking Approval Bypass Affected: before 10.30.20 |
| CVE-2024-2429 | 4.3 | Apr 26 | Salon booking system <= 9.6.5 - Settings Update via CSRF Affected: through 9.6.5 |
Showing 16