CVE-2026-110033 Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'

The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server...

CVE-2026-110033

The Salon Booking System WordPress plugin, in versions prior to 10.31.11 , is vulnerable to Server-Side Request Forgery (SSRF) and Stored Cross-Site Scripting (XSS) . The root cause is a failure to validate user-supplied image URLs during the Salon REST API image_url processing. An attacker with ...

CVE-2026-110033 Salon Booking System < 10.31.11 - Salon Staff+ Stored XSS and SSRF via Salon REST 'image_url'

The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under an attacker-chosen filename, allowing users with the Salon Staff role or higher to force the server...