PT-2026-69364

Name of the Vulnerable Software and Affected Versions Salon Booking System versions prior to 10.30.34 Description The plugin fails to perform capability checks or validate the OAuth state value during the Google Calendar authorization callback. Because this callback is accessible to unauthenticat...