Vulnerability index

Browse CVEs

17 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Salon Booking System HIGH 8.8
CVE-2025-32220

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Contr…

Fix: after 10.11
Fix from $1,950 2025-04-04
Salon Booking System HIGH 7.2
CVE-2025-31560

Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Privilege Escalation.This issue affec…

Fix: after 10.11
Fix from $1,950 2025-04-01
Salon Booking System HIGH 8.8
CVE-2024-47316

Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon b…

Fix: 10.9.1+
Fix from $1,950 2024-10-05
Salon Booking System HIGH 7.2
CVE-2024-39658

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allow…

Fix: 10.8+
Fix from $1,950 2024-08-29
Salon Booking System MEDIUM 6.1
CVE-2024-43280

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking syste…

Fix: 10.9+
Fix from $1,600 2024-08-19
Salon Booking System CRITICAL 9.1
CVE-2024-37231

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File…

Fix: 10.0+
Fix from $2,300 2024-06-24
Salon Booking System CRITICAL 9.8
CVE-2024-3229

The Salon booking system plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SLN_Action_Ajax_Impo…

Fix: 10.3+
Fix from $2,300 2024-06-19
Salon Booking System MEDIUM 5.4
CVE-2024-4468

The Salon booking system plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on seve…

Fix: 10.0+
Fix from $1,600 2024-06-08
Salon Booking System CRITICAL 9.1
CVE-2024-4442

The Salon booking system plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 9.8. This is due to the …

Fix: 10.0+
Fix from $2,300 2024-05-21
Salon Booking System HIGH 7.2
CVE-2023-48319

Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking…

Fix: 8.7+
Fix from $1,950 2024-05-17
Salon Booking System MEDIUM 6.3
CVE-2024-2603

The Salon booking system WordPress plugin through 9.6.5 does not sanitise and escape some of its settings, which could allow high privilege users suc…

Fix: 9.6.6+
Fix from $1,600 2024-04-26
Salon Booking System MEDIUM 5.7
CVE-2024-2101

The Salon booking system WordPress plugin before 9.6.3 does not properly sanitize and escape the 'Mobile Phone' field when booking an appointment, al…

Fix: 9.6.3+
Fix from $1,600 2024-04-17
Salon Booking System CRITICAL 9.8
CVE-2024-30510

Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: f…

Fix: 9.5.1+
Fix from $2,300 2024-03-29
Salon Booking System MEDIUM 6.1
CVE-2022-43487

Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacker to inject an arbitrary scri…

Fix: 7.9+
Fix from $1,600 2022-12-05
Salon Booking System HIGH 7.5
CVE-2022-0920

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow cus…

Fix: 7.6.3+
Fix from $1,950 2022-04-11
Salon Booking System MEDIUM 5.3
CVE-2022-0919

The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any unauthent…

Fix: 7.6.3+
Fix from $1,600 2022-04-11
Salon Booking System MEDIUM 6.1
CVE-2021-24429

The Salon booking system WordPress plugin before 6.3.1 does not properly sanitise and escape the First Name field when booking an appointment, allowi…

Fix: 6.3.1+
Fix from $1,600 2021-07-12