CVE-2025-8492: Missing Authorization

The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax function in all versions up to, and including, 10.22. This makes it possible for unauthenticat...

CVE-2024-9882: Improper Neutralization of Input During Web Page Generation

The Salon Booking System, Appointment Scheduling for Salons, Spas & Small Businesses WordPress plugin before 1.9.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...

WordPress Online Booking for Barbershops and Salons Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Online Booking for Barbershops and Salons Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 42e60e184e83 Credits Rafie...

salons-solutions.com Cross Site Scripting vulnerability OBB-3384913

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Online Booking for Barbershops and Salons plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Online Booking for Barbershops and Salons plugin versions = 1.0.0. Solution No patched version available...

WordPress Online Booking for Barbershops and Salons plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Online Booking for Barbershops and Salons plugin versions = 1.0.0. Solution No patched version available...

saudisalons.com Cross Site Scripting vulnerability OBB-1293623

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

salons-coiffure.com XSS vulnerability

Open Bug Bounty ID: OBB-701531 Description| Value ---|--- Affected Website:| salons-coiffure.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...