Approved changes feed: RSS · Atom

cpe:2.3:a:salon_booking_system:salon_booking_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSalon Booking System (32d18a8c-6153-571a-a67d-a88cb301f090)
ProductSalon Booking System (f2c2fab6-d15e-5a6d-9992-c9fd3a100358)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47316 vulnerable 2026-06-08 06:48:11.759523 WordPress Salon Booking Wordpress Plugin plugin <= 10.9 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (4.3)
Authorization Bypass Through User-Controlled Key vulnerability in Dimitri Grassi Salon booking system salon-booking-system.This issue affects Salon booking system: from n/a through <= 10.9.
Published: 2024-10-05T12:27:13.140Z
Updated: 2026-04-28T16:10:18.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43280 vulnerable 2026-06-08 06:45:50.009164 WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerability
MEDIUM (4.7)
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 10.8.1.
Published: 2024-08-19T17:45:39.639Z
Updated: 2026-04-28T16:10:11.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39658 vulnerable 2026-06-08 06:41:51.295654 WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salon Booking System Salon booking system allows SQL Injection.This issue affects Salon booking system: from n/a through 10.7.
Published: 2024-08-29T14:42:19.396Z
Updated: 2026-04-28T16:10:07.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37231 vulnerable 2026-06-08 06:39:46.930767 WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerability
HIGH (8.6)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9.
Published: 2024-06-24T12:39:16.964Z
Updated: 2026-04-28T16:09:56.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30510 vulnerable 2026-06-08 06:35:30.483672 WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in Salon Booking System Salon booking system.This issue affects Salon booking system: from n/a through 9.5.
Published: 2024-03-29T13:36:22.950Z
Updated: 2026-04-28T16:09:25.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48319 vulnerable 2026-06-08 06:14:26.877459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43487 vulnerable 2026-06-08 05:49:32.134905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24429 vulnerable 2026-06-08 05:30:04.364901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.