agentprime: salon-booking-systemEvery new CVE for salon-booking-system.https://agentprime.io/CVE-2026-110034: Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Codehttps://agentprime.io/advisories/CVE-2026-110034/https://agentprime.io/advisories/CVE-2026-110034/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 06:46:14 GMTCVECVE-2026-110035: Salon Booking System < 10.31.11 - Subscriber+ Coupon Code Disclosure via Discounts REST Routehttps://agentprime.io/advisories/CVE-2026-110035/https://agentprime.io/advisories/CVE-2026-110035/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 06:00:15 GMTCVECVE-2026-110033: Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'https://agentprime.io/advisories/CVE-2026-110033/https://agentprime.io/advisories/CVE-2026-110033/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 06:00:15 GMTCVECVE-2026-110032: Salon Booking System < 10.31.11 - Salon Staff+ Administrator Role Demotion via Customer Editorhttps://agentprime.io/advisories/CVE-2026-110032/https://agentprime.io/advisories/CVE-2026-110032/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 06:00:15 GMTCVECVE-2026-110031: Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Keyhttps://agentprime.io/advisories/CVE-2026-110031/https://agentprime.io/advisories/CVE-2026-110031/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 06:00:15 GMTCVECVE-2026-110015: Salon Booking System < 10.31.9 - Administrator Account Creation via CSRFhttps://agentprime.io/advisories/CVE-2026-110015/https://agentprime.io/advisories/CVE-2026-110015/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:00:14 GMTCVECVE-2026-110014: Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and Statushttps://agentprime.io/advisories/CVE-2026-110014/https://agentprime.io/advisories/CVE-2026-110014/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:00:14 GMTCVECVE-2026-110013: Salon Booking System < 10.31.9 - Unauthenticated Salon REST API Access via Predictable Access-Tokenhttps://agentprime.io/advisories/CVE-2026-110013/https://agentprime.io/advisories/CVE-2026-110013/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:00:14 GMTCVECVE-2026-110012: Salon Booking System < 10.31.3 - Subscriber+ Booking PII Disclosure via REST bookings/upcominghttps://agentprime.io/advisories/CVE-2026-110012/https://agentprime.io/advisories/CVE-2026-110012/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 06:00:14 GMTCVECVE-2026-17023: Salon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth Callbackhttps://agentprime.io/advisories/CVE-2026-17023/https://agentprime.io/advisories/CVE-2026-17023/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 06:00:18 GMTCVECVE-2026-17022: Salon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking Wizardhttps://agentprime.io/advisories/CVE-2026-17022/https://agentprime.io/advisories/CVE-2026-17022/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 06:00:17 GMTCVECVE-2026-17021: Salon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total Tamperinghttps://agentprime.io/advisories/CVE-2026-17021/https://agentprime.io/advisories/CVE-2026-17021/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 06:00:17 GMTCVECVE-2026-17020: Salon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII Disclosurehttps://agentprime.io/advisories/CVE-2026-17020/https://agentprime.io/advisories/CVE-2026-17020/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 06:00:17 GMTCVECVE-2026-11887: Salon Booking System < 10.30.20 - Subscriber+ Booking Approval Bypasshttps://agentprime.io/advisories/CVE-2026-11887/https://agentprime.io/advisories/CVE-2026-11887/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Jul 2026 06:00:02 GMTCVECVE-2024-39658: WordPress Salon Booking System plugin <= 10.7 - Authenticated SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-39658/https://agentprime.io/advisories/CVE-2024-39658/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 14:42:19 GMTCVECVE-2024-43280: WordPress Salon Booking System plugin <= 10.8.1 - Open Redirection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-43280/https://agentprime.io/advisories/CVE-2024-43280/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Aug 2024 17:45:39 GMTCVECVE-2024-37231: WordPress Salon booking system plugin <= 9.9 - Arbitrary File Deletion vulnerabilityhttps://agentprime.io/advisories/CVE-2024-37231/https://agentprime.io/advisories/CVE-2024-37231/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Jun 2024 12:39:16 GMTCVECVE-2023-48319: WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2023-48319/https://agentprime.io/advisories/CVE-2023-48319/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 May 2024 08:37:58 GMTCVECVE-2024-2603: Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settingshttps://agentprime.io/advisories/CVE-2024-2603/https://agentprime.io/advisories/CVE-2024-2603/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Apr 2024 05:00:03 GMTCVECVE-2024-2439: Salon booking system <= 9.6.5 - Editor+ Stored XSShttps://agentprime.io/advisories/CVE-2024-2439/https://agentprime.io/advisories/CVE-2024-2439/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Apr 2024 05:00:03 GMTCVECVE-2024-2429: Salon booking system <= 9.6.5 - Settings Update via CSRFhttps://agentprime.io/advisories/CVE-2024-2429/https://agentprime.io/advisories/CVE-2024-2429/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Apr 2024 05:00:02 GMTCVECVE-2024-2102: Salon booking system < 9.6.3 - Unauthenticated Stored XSShttps://agentprime.io/advisories/CVE-2024-2102/https://agentprime.io/advisories/CVE-2024-2102/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 05:00:02 GMTCVECVE-2024-2101: WordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)https://agentprime.io/advisories/CVE-2024-2101/https://agentprime.io/advisories/CVE-2024-2101/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 05:00:02 GMTCVECVE-2024-30510: WordPress Salon booking system plugin <= 9.5 - Arbitrary File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30510/https://agentprime.io/advisories/CVE-2024-30510/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 13:36:22 GMTCVEcriticalCVE-2022-43487: Cross-site scripting in Salon booking systemhttps://agentprime.io/advisories/CVE-2022-43487/https://agentprime.io/advisories/CVE-2022-43487/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Dec 2022 00:00:00 GMTCVECVE-2022-0920: Salon booking system < 7.6.3 - Customer+ Bookings/Customers Data Disclosurehttps://agentprime.io/advisories/CVE-2022-0920/https://agentprime.io/advisories/CVE-2022-0920/Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Apr 2022 14:40:58 GMTCVECVE-2022-0919: Salon booking system < 7.6.3 - Unauthenticated Sensitive Data Disclosurehttps://agentprime.io/advisories/CVE-2022-0919/https://agentprime.io/advisories/CVE-2022-0919/Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Apr 2022 14:40:56 GMTCVECVE-2021-24429: Salon Booking System < 6.3.1 - Unauthenticated Stored Cross-Site Scripting (XSS)https://agentprime.io/advisories/CVE-2021-24429/https://agentprime.io/advisories/CVE-2021-24429/Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jul 2021 19:20:59 GMTCVE