Salonbookingsystem vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Salonbookingsystem products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

7.2CVE-2023-48319salon booking systemsalon booking system+2
EPSS score
0.52%
Improper Privilege Management vulnerability in Salon Booking System Salon booking system allows Privilege Escalation.This issue affects Salon booking system: from n/a through 8.6.5.4CVE-2023-3427salonbookingsystemsalon_booking_system+2
EPSS score
0.30%
The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.6. This is due to missing or incorrect nonce validation on the 'save_customer' function. This makes it possible for unauthenticated attackers to change the admin role to customer or change the user meta to arbitrary values via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.